An attacker exploited a known SMB vulnerability in unpatched Windows XP systems within the NHS network. This vulnerability allowed unauthorized access to internal systems, risking sensitive data exposure and potential system compromise.