OneAdvanced announced this month that their AI agents could save the NHS £75 million annually and free up the equivalent of 150,000 additional appointments per week. The Clinical Coding Agent and Clinical Summarisation Agent automate paperwork in GP surgeries—suggesting SNOMED codes and extracting key information from clinical documents so GPs can spend less time on admin.

Which sounds brilliant. Genuinely useful, even. Automating the tedious parts of clinical documentation so doctors can see patients is exactly the kind of thing AI should be doing.

Except OneAdvanced is the company that was fined £3.07 million in March 2025 for security failings after hackers accessed their systems in 2022 via a customer account that didn’t have multi-factor authentication enabled. That breach compromised personal information for 79,404 people, including how to gain entry into the homes of 890 people receiving care at home. It disrupted NHS 111 services. It was a disaster.

And now they’re back, selling AI automation tools that will process clinical documents at scale across GP practices.