Collaborate Disseminate
The University of Minnesota has published a research brief: New research from the University of Minnesota School of Public Health provides the first detailed look at whether funding provided through a federal relief program effectively reached hospital… Continue reading Examining impact of federal relief program after major healthcare cyberattack — Research Brief
Ukrainian National Indicted and Rewards Announced for Co-Conspirators Relating to Destructive Cyberattacks Worldwide WASHINGTON — The Justice Department announced two indictments in the Central District of California charging Ukrainian national Victori… Continue reading Justice Department Announces Actions to Combat Two Russian State-Sponsored Hacking Groups
If this were a poll, DataBreaches would vote “yes.” DataBreaches has never really understood why breach notification letters do not have to reveal the name of a business associate or vendor if the breach occurred on their system. Why should… Continue reading Should entities be required to disclose the name of a vendor if the breach was at the vendor’s?
Joseph J. Lazzarotti of JacksonLewis writes: When Royal Cornwall Hospital responded to a routine Freedom of Information request in 2023, they had no idea they were about to expose sensitive staff data to the public. The hospital recently apologized aft… Continue reading The Hidden Risks of Information Disclosure: A Costly Lesson from Cornwall
Tom Leithauser writes: The Department of Defense would have to add new cybersecurity requirements to its contracts for telecom services when those services are used for “sensitive national security functions” under legislation released yesterday by the… Continue reading Defense Bill Would Require New Cyber Requirements for Some DoD Telecom Contracts
Over at SuspectFile, Marco A. De Felice reports: Trumbull County (Ohio) was hit by a severe cyberattack in the first days of November 2025, carried out by the ransomware group Anubis. Despite multiple public statements issued by county representatives—… Continue reading Tell the truth, or someone will tell it for you — Trumbull County, Ohio edition (1)
From the U.S. Department of Justice: Two Virginia men were arrested today for their roles in a conspiracy to destroy government databases hosted by a federal government contractor, among other crimes. According to court documents, brothers Muneeb and S… Continue reading Virginia Twins Arrested for Conspiring to Destroy Government Databases
Dysruption Hub reports: Puerto Rico officials say a Thanksgiving-week cyberattack on IT contractor Truenorth Corporation briefly disrupted systems at three major agencies but did not compromise citizen data, even as independent reporting describes a br… Continue reading Cyberattack on Puerto Rico IT vendor Truenorth hits 3 agencies
One of the most worrying concerns DataBreaches and Protenus reported each year when reporting on breaches of health data was the insider threat. Often the insider threat takes the form of “snooping” out of curiosity. At other times, it may … Continue reading Easy Question, Complicated Answer: What Does It Take to Stop Workers From Snooping?
After posting something about a new report on cbsecurity[.]net by Dos-OP on Nova RaaS, Nova contacted me to complain, dispute the claims, and accuse me of being an unprofessional journalist. Once they made contact, I told him I would forward his critic… Continue reading Update on Dos-OP’s report on Nova RaaS