Recent Breaches
Breaches
2026PowerSchool62.4M records stolen2026DISA Global Solutions3.3M records stolen2026Globe Life850K records stolen2026NHS ScotlandUndisclosed records stolen2026HertzUndisclosed records stolen2025Marks & Spencer9.4M records stolen2025PayPal35K records stolen2025Jaguar Land RoverUndisclosed records stolen2025Co-operative GroupUndisclosed records stolen2024National Public Data2.9B records stolen2024Ticketmaster560M records stolen2024Change Healthcare100M+ records stolen2024AT&T73M records stolen2024Dell Technologies49M records stolen2023Progress Software (MOVEit)77M+ records stolen202323andMe6.9M records stolen2023Royal MailOperations halted records stolen2023British LibraryUndisclosed records stolen2023MGM ResortsUndisclosed records stolen2022Uber57M records stolen2022LastPass33M records stolen2022Optus9.8M records stolen2022Medibank9.7M records stolen2022Twitter5.4M records stolen2026NHS ScotlandUndisclosed records stolen2026HertzUndisclosed records stolen2025Marks & Spencer9.4M records stolen2025PayPal35K records stolen2025Jaguar Land RoverUndisclosed records stolen2025Co-operative GroupUndisclosed records stolen2024National Public Data2.9B records stolen2024Ticketmaster560M records stolen2024Change Healthcare100M+ records stolen2024AT&T73M records stolen2024Dell Technologies49M records stolen2023Progress Software (MOVEit)77M+ records stolen202323andMe6.9M records stolen2023Royal MailOperations halted records stolen2023British LibraryUndisclosed records stolen2023MGM ResortsUndisclosed records stolen2022Uber57M records stolen2022LastPass33M records stolen2022Optus9.8M records stolen2022Medibank9.7M records stolen2022Twitter5.4M records stolen2026PowerSchool62.4M records stolen2026DISA Global Solutions3.3M records stolen2026Globe Life850K records stolen
View All →
OSS for Industry

Offline Secure Storage for Healthcare

Patient data is among the most sensitive and regulated data in existence. Offline Secure Storage (OSS) provides physical disconnection for clinical records and medical research.

We Think This Is Hard to Ignore

NHS Synnovis was paralysed for months after ransomware encrypted connected patient systems, forcing the cancellation of thousands of operations. At Firevault, clinical records live on hardware that is physically unreachable, because patient safety depends on data that ransomware cannot touch.

£10.9M

Average cost of a healthcare data breach

IBM Cost of a Data Breach 2024

6 months

NHS Synnovis ransomware disruption to London hospitals

BBC News, 2024

400K+

Patient appointments disrupted by Synnovis attack

NHS England, 2024

£14M

ICO fine to Capita, which processes NHS data

ICO, October 2025

Industry Risks

Healthcare faces unique data threats.

Patient Records

Medical records command premium prices on the dark web — up to 50x financial data.

Ransomware Targeting

Healthcare is the number one targeted sector for ransomware attacks.

Regulatory Pressure

NHS DSPT, GDPR, and Caldicott principles demand appropriate protection.

The Reality

This is already happening in healthcare.

NHS Synnovis: Ransomware Paralysed London Hospitals for Months

A ransomware attack on pathology provider Synnovis disrupted blood tests and operations across major London hospitals. Over 400,000 patient appointments were affected and stolen patient data was published online.

BBC News, June 2024

Capita: £14M Fine — NHS Data Processor Breached

Capita processes data for multiple NHS trusts. The ICO fined the outsourcer £14 million after hackers accessed personal data of over 6 million people, including patient records.

ICO, October 2025

Co-op: 6.5 Million Members' Data Stolen Including Pharmacy Records

Attackers exfiltrated personal data of all 6.5 million Co-op members, including those using Co-op pharmacy services, in an attack the CEO described as devastating.

BBC News, 2025

How Firevault Stops This

Remove patient data from every system attackers can reach.

Patient records, clinical trial data, and safeguarding files are taken off hospital networks and written to dedicated RAID 1 drives inside a Firevault Bunker. Those drives have no internet connection. No IP address. No API. When authorised clinical staff need access, a physical connection is created after identity verification. When the session ends, the drives disconnect.

  • Patient data removed from hospital networks and placed on hardware with no network connection. Ransomware cannot encrypt what is not online
  • Clinical records isolated with identity-verified access. Stolen staff credentials cannot unlock physically disconnected hardware
  • Full audit trail for NHS DSPT, Caldicott, and GDPR compliance. Every access session is logged and attributable
  • Held in carefully selected Firevault Bunkers with clear jurisdictional boundaries for data sovereignty

Take Patient Data Off Hospital Networks

Step 1 of 3

Patient records, clinical trial data, and safeguarding files are taken off hospital networks and written to physically disconnected RAID 1 drives inside a Firevault Bunker. No cloud. No shared system. No attack surface.

Featured In

TechRadar ProConnected BritainTotal TelecomSecurity BuyerComms BusinessComms DealerBlocks & FilesYahoo FinanceGlobeNewswireChannel InsiderUK DirectorSecurityBriefPCRBusiness Time in EssexTechRadar ProConnected BritainTotal TelecomSecurity BuyerComms BusinessComms DealerBlocks & FilesYahoo FinanceGlobeNewswireChannel InsiderUK DirectorSecurityBriefPCRBusiness Time in Essex

Choose Your Protection

Which OSS Fits?

300GB

Low Use Vault — Deep Cold Storage

From £74.99/mo

inc. VAT · £0 due today

Deep cold storage for safeguarding records and patient files accessed periodically for audits or reviews.

What 300GB holds

~60,000 high-res photos
~150,000 PDF documents
~1,200 hours of voice recordings
~75 hours of HD video

Use Cases for Healthcare

  • Safeguarding and vulnerable patient records
  • Historic patient notes and discharge summaries
  • Clinical trial consent documentation
  • Staff DBS and occupational health files
  • Complaint and incident investigation files

Specifications

Capacity

300GB

Access

2 windows/week

Authentication

Identity-locked

Commitment

36 months

Security & Compliance

NATO-Approved FacilityDSIT-ReferencedGDPR Art. 32Cyber Essentials Plus

How to Get Started

Step 1

Discovery Call

Understand what you need to protect and how you operate.

Step 2

Vault Configuration

Select your tier, capacity, and access model.

Step 3

Identity Verification

Complete KYC/AML and set up multi-factor authentication.

Step 4

Go Live

Data ingestion, access policy activation, and ongoing support.

Questions

Frequently Asked

Ready to take the next step?

See how Firevault can protect your most sensitive data with physically disconnected storage.

    Your privacy matters

    We use cookies to keep the site running smoothly and to understand how you use it. You are in control. Privacy Charter · Cookie Policy