Global Law Enforcement Action Interferes with NetWalker Ransomware Activities
The U.S. Department of Justice (DOJ) issued an announcement about the seizure of a dark web website utilized by the NetWalker ransomware gang in connection…
Healthcare IT Security
University of Minnesota Physicians and McLeod Health Encounters Email Account Breaches
University of Minnesota Physicians lately encountered a phishing attack that made it possible for unauthorized persons to get access to two employees’ email accounts. One…
Phishing Incidents Reported by Connecticut Department of Social Services, Mercy Iowa City, and LSU Care Services
Connecticut Department of Social Services (DSS) sent a notification about a potential breach of the protected health information (PHI) of 37,000 persons due to several…
ASPR Gives Update on Ransomware Activities in the Healthcare Sector
The HHS’ Office of the Assistant Secretary for Preparedness and Response (ASPR) has released a recent advisory on ransomware activity that targets the healthcare and…
PHI Incidents at Northwest Eye Surgeons and Sight Partners, DJO, LLC and Lawrence General Hospital
Server Breach Impacts Patients of Northwest Eye Surgeons and Sight Partners Northwest Eye Surgeons LLC and Sight Partners LLC began informing 20,838 patients regarding the…
Exposed Broadvoice Databases Contained 350 Million Records, Including Health Information
Comparitech security researcher Bob Diachenko has found an open group of databases that belong to the Voice over IP (VoIP) telecommunications merchant Broadvoice. The records…
CISA/FBI Advisory on APT Groups Chaining Legacy Vulnerabilities Along with Netlogon Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint advisory about sophisticated advanced persistent threat groups sequencing…
CISA Publishes Advisory Due to Greater Emotet Malware Attacks
Subsequent to a time period of dormancy between February 2020 and July 2020, the Emotet botnet jumped back again and began spam runs circulating the…
Universal Health Services IT Systems Across the United States Shutdown Due to Ransomware Attack
Universal Health Services (UHS) based in King of Prussia, PA has encountered a major security breach that led to the unavailability of its IT systems….
Resources to Enable Healthcare Companies Boost Resilience Against Insider Threats
The National Insider Threat Awareness Month (NITAM) is being celebrated this September 2020 for the second year. All through the month, resources will be offered…
Study Shows Increase in Credential Theft Through Spoofed Login Pages
IRONSCALES new research showed a substantial spike in credential theft utilizing spoofed websites. In the first half of 2020, the researchers discovered and reviewed bogus…
About 10,000 Patients Affected by Beaumont Health and The Connection, Inc. Phishing Attacks
Beaumont Health, the leading healthcare system located in Michigan, began notifying 6,000 patients about the potential access of their protected health information (PHI) by unauthorized…
PHI of Consumers Compromised in Theft Incidents at Cub Pharmacies
A pharmacy chain reported that looters stole the protected health information (PHI) of some of its clients at the end of May at the time…
Data Breaches at Lorien Health Services, Accu Copy of Greenville and National Cardiovascular Partners
Lorien Health Services based in Ellicott City, MD, which manages 9 assisted living facilities throughout Maryland had encountered a ransomware attack on June 6, 2020….
Serious Vulnerabilities Identified in Apache Guacamole Remote Access Software
A few vulnerabilities were discovered in the Apache Guacamole remote access system. Plenty of companies had been using Apache Guacamole to allow administrators and personnel…
NSA Releases Guidance on Protecting IPsec Virtual Private Networks
The U.S. National Security Agency (NSA) has published guidance to aid businesses in protecting IP Security (IPsec) Virtual Private Networks (VPNs) that are utilized to…
PHI Compromised Due to a Ransomware Attack and an Email Security Breach
Rangely District Hospital in Colorado began informing patients concerning the April 2020 ransomware attack that affected some of their protected health information (PHI) located on…
Voicemail Phishing Trick Discovered Targeting Remote Healthcare Employees
A lot of organizations are compelled to modify working strategies due to the COVID-19 crisis. A big number of workers now do their jobs from…
Healthcare Provider Employees Terminated Because of Impermissible Disclosure of PHI
Healthcare provider Kaiser Permanente based in Oakland, CA found out that an ex-employee got access to the radiology files of a lot of patients with…
Senators Wrote CISA and FBI Concerning the Danger to COVID-19 Research Data
Four Senators sent a letter to the Federal Bureau of Investigation (FBI) and the DHS Cybersecurity and Infrastructure Security Agency (CISA) due to the new…
BJC HealthCare Phishing Attack Affects PHI of Patients at 19 Hospitals
BJC Healthcare made an announcement about the unauthorized persons accessing the email accounts of three BJC employees after replying to the phishing emails in their…
FBI Gives Flash Advisory Regarding COVID-19 Phishing Attacks Targeting Healthcare Organizations
FBI has released another notice subsequent to a rise in COVID-19 phishing scams aimed towards healthcare organizations. In the notification, the FBI points out that…
Phishing Attacks at the Doctors Community Medical Center and Washington University School of Medicine
Doctors Community Medical Center in Maryland sent notification to some patients concerning a breach of their PHI. The discovery of the data breach in January…
Vulnerability Found in BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
Becton, Dickinson and Company (BD) found a medium severity vulnerability in the BD Pyxis MedStation medication dispensing system version 1.6.1 and in the anesthesia carts…
Remote Employees Targeted By Cybercriminals Taking Advantage of the COVID-19 Crisis
The COVID-19 pandemic has made it compulsory for lots of persons to self-isolate. Organizations are under rising pressure to permit their personnel to work from…
HIV Test Phishing Campaign Targets Healthcare and Pharmaceutical Companies
Proofpoint researchers have discovered a new phishing campaign directed at healthcare organizations, insurance companies, and pharmaceutical firms. The intercepted emails imitate Vanderbilt University Medical Center…
Employee Email Account Breach at PSL Services and Monroe County Hospital & Clinics
Peregrine Corporation, also known as PSL Services, found out about the unauthorized access to the email accounts of several employees from December 16 to December…
Phishing Attack on MHMR of Tarrant County and Reva Impacted 7,524 People
My Health My Resources (MHMR) of Tarrant County in Fort Worth, TX suffered a phishing attack that resulted in the compromise of some employees’ email…
Threat to Publish Stolen Data by Maze Ransomware Group Increasing
The threat actors responsible for the Maze ransomware attacks are threatening their victims that they will post the information stolen during ransomware attacks if they…
65% of American Organizations Had Dealt With a Successful Phishing Attack in 2019
The cybersecurity firm Proofpoint shared its 2020 State of the Phish report, which showed that 65% of American organizations (55% worldwide) experienced at least one…
FBI Warning Against Maze Ransomware Attacks
The Federal Bureau of Investigation (FBI) published an alert to warn private companies in the U.S. concerning Maze ransomware attacks. FBI gave the alert after…
Second Lawsuit Filed Against Kalispell Regional Healthcare Over Phishing Attack
Kalispell Regional Healthcare based in Montana is charged with another legal case on account of the May 2019 phishing attack that allowed cybercriminals to access…
Cybersecurity Issues In Healthcare Industry Ranked 8th Globally Despite DNS Health And Endpoint Security Concerns
Despite the implementation of HIPAA regulations, the healthcare industry’s cybersecurity still lags behind other sectors. According to Security Scorecard’s 2019 Healthcare Cybersecurity Report, the industry…
200,000 Critical and Severe Vulnerabilities Being Fixed by Blue Cross Blue Shield of Minnesota
Blue Cross Blue Shield of Minnesota, which is Minnesota’s biggest health insurance company, is presently trying to take care of approximately 200,000 unaddressed vulnerabilities detected…
Data Breaches Reported by Sunrise Community Health, Katherine Shaw Bethea Hospital and NYC Health + Hospitals
Sunrise Community Health located in Evans, CO uncovered the exposure of a number of employees’ email accounts because of the employees’ response to phishing emails….
Phishing Attacks on Comprehensive Sleep Care Center and Ivy Rehab Physical Therapy Potentially Impact PHI
Loudoun Medical Group, also known as Comprehensive Sleep Care Center (CSCC), experienced a phishing attack approximately on June 19, 2019. The IT department was notified…
Great Plains Health Patient Medical Records Encrypted Due to Ransomware Attack
A ransomware attack on Great Plains Health based in North Platte, NE resulted in the encryption of some patients’ health records. Great Plains Health discovered…
Philips IntelliBridge EC40/80 Hubs Were Found to Have a Vulnerability
Philips released information about a vulnerability found in Philips IntelliBridge EC40/80 hubs. An attacker could exploit to access vulnerable hubs and execute a software program,…
Phishing Attacks Compromise PHI of 56,000 Presbyterian Health Plan Members
A series of phishing attacks have compromised the protected health information of 56,000 members of Presbyterian Health Plan. The phishing attacks did not directly target…
Fedcap Rehabilitation Notifying 2,200 Individuals of Data Breach
Fedcap Rehabilitation is in the process of notifying 2,200 individuals of a data security incident which may have seen their confidential information compromised. New York-based…
Malware Found in Android PDF App CamScanner
Users of the Android app CamScanner have been advised to uninstall the app after a recent version was found to harbour malware. Security researchers at…
Grays Harbor Community Hospital in Washington Ransomware Attack Affects 88,000 Patients
Grays Harbor Community Hospital in Washington is notifying 88,399 patients that their confidential health information may have been compromised in a ransomware attack. The hospital…
Northwood Notifying Patients of Data Breach Following Phishing Attack
Northwood Inc. is notifying individuals that their private information may have been comprised in a data breach following a phishing attack. Northwood Inc., based in…
Phishing Campaign Spreads Trickbot Trojan Through Fake Office 365 Website
A fake Office 365 phishing website is being used by hackers to distribute the Trickbot Trojan. The website is a convincing mimic of the legitimate…
June 2019 Patch Tuesday: Mircosoft Fixes 88 Vulnerabilities
Microsoft has issued patches for 88 vulnerabilities this patch Tuesday. Of the vulnerabilities, 20 were rated critical. One servicing stack and 4 advisories were also…
AMCA Breach Compromises 12 Million Quest Diagnostics Records
A breach at the American Medical Collection Agency (AMCA) has compromised the records of nearly 12 million Quest Diagnostics patients. AMCA, a billing collections company…
Southeastern Council on Alcoholism and Drug Dependence Notifies Patients Following Ransomware Attack
The Southeastern Council on Alcoholism and Drug Dependence is notifying 25,000 patients that their PHI has been compromised in a ransomware attack. SCADD, based in…
Researchers Find Mail Clients Vulnerable to Digital Signature Spoofing Attacks
Cybersecurity researchers have identified vulnerabilities in mail clients that could be exploited by hackers in digital signature spoofing attacks. Digital signatures are widely used to…
Phishing Attack on Baystate Health Affects 12,000 Patients
Baystate Health has notified 12,000 patients a phishing attack on their facility compromised their PHI. Baystate Health, based in Massachusetts, discovered that an unauthorised individual…
Riverside Counselling Notifies Patients of Malware Attack
Riverplace Counselling Centre is notifying 11,639 patients of a data security incident following the discovery of malware on its systems. Riverplace Counselling Center in Anoka,…