Cybercriminals infiltrated NHS Professionals in May 2024, stealing its Active Directory database without public disclosure. Despite NHSP's claims of no data compromise, internal reports indicated significant breaches and vulnerabilities, prompting recommendations for enhanced cybersecurity measures, including multi-factor authentication and endpoint detection solutions.