Case Studies

Medical Data Breach Cases Listing the ICO Fines and Private Litigation due to Non GDPR compliance by Registered Independent Pharmacies, Dental Practices and Doctors contracted to the NHS
Independent Pharmacies: ICO Fine Example

Doorstep Dispensaree Ltd (London)

  • Initial Fine: E275,OOO
  • Breach: Patient records stored in unlocked containers
  • ICO Finding: "Serious failure to protect personl data"
Hundreds of other pharmacy cases settled out of court.
Dental Practices: Reported Data Breaches
  • 2025: Diamond Court Dental Phishing Email Incident
  • 2024: Fresh Dental (Guernsey) Microsoft 365 Breach
  • 2023: Congleton Dental Centre Ransomware Attack
  • 2020: British Dental Association Cyberattack Exposure
Hundreds of other pharmacy cases settled out of court.
GP Surgeries & Doctors: ICO Actions & Fines
  • 2016: E40,OOO Fine for Data Disclosure
  • 2018: E35,OOO Fine for Abandoned Records
  • 2017: E200,OOO Fine Data Breach
Hundreds of other pharmacy cases settled out of court.
Why Most GDPR Breaches Are Not Public
  • Settled Out of Court
  • Confidential Agreements
  • Risk of Future Enforcement
Hundreds of other pharmacy cases settled out of court.
Case Study

Independent Pharmacy Data Breach

Case Study

Dental Practice
Data Breach

Case Study

Doctors Practice
Data Breach