You would hope that an NHS Trust would employ people who'd know better than to be conned out of £680,000. They haven't given any details so it makes me think that describing it as a very, very sophisticated scam is probably just an excuse for their lapses.
Just shows that it's not just inexperienced computer users who can fall prey to scams.