When a deal is not a done deal: Nova demands higher payment from Clinical Diagnostics

Last week, it appeared that Clinical Diagnostics (“Eurofins”) had paid a gang’s demands not to leak patient data that Nova had exfiltrated during a ransomware attack in July. Clinical Diagnostics in the Netheralands held patient data … Continue reading When a deal is not a done deal: Nova demands higher payment from Clinical Diagnostics→

HHS OCR Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP

In February 2020, DataBreaches reported that patients of Community Care Physicians in New York may have had their protected health information, date of birth, and insurance coverage exposed as a result of a ransomware attack by Maze Team at the Albany-… Continue reading HHS OCR Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP→

HHS OCR Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP

In February 2020, DataBreaches reported that patients of Community Care Physicians in New York may have had their protected health information, date of birth, and insurance coverage exposed as a result of a ransomware attack by Maze Team at the Albany-… Continue reading HHS OCR Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP→

Microsoft’s Nuance coughs up $8.5M to rid itself of MOVEit breach suit

Carly Page reports: Microsoft-owned talk-to-text outfit Nuance has agreed to cough up $8.5 million to settle a class action lawsuit over the sprawling MOVEit Transfer mega-breach – although it admits no liability. The proposed deal [PDF], filed in a Ma… Continue reading Microsoft’s Nuance coughs up $8.5M to rid itself of MOVEit breach suit→

18 Arrested as Gurugram Call Centre Data Leak Fuels Massive SBI Credit Card Scam

The420.in reports: The Delhi Police have arrested 18 individuals for duping State Bank of India (SBI) credit card holders of nearly ₹2.6 crore [USD $296,630.45] in a nationwide fraud. The operation, which ran for six months, relied on insider leaks at … Continue reading 18 Arrested as Gurugram Call Centre Data Leak Fuels Massive SBI Credit Card Scam→

Government papers found in an Alaskan hotel reveal new details of Trump-Putin summit

For the “No need to hack when it’s leaking” and the “our government is our insider threat” files, Chiara Eisner of NPR reports: Papers with U.S. State Department markings, found Friday morning in the business center of an … Continue reading Government papers found in an Alaskan hotel reveal new details of Trump-Putin summit→

Data breach at Fundamental Administrative Services affected 56,235 patients at long-term care facilities

On March 21, 2025, Fundamental Administrative Services, LLC (“Fundamental”), a Maryland-headquartered service provider to long-term care facilities, notified HHS of a breach involving unauthorized access to its network. At the time, they us… Continue reading Data breach at Fundamental Administrative Services affected 56,235 patients at long-term care facilities→

NYDFS Secures $2 Million Cybersecurity Settlement with Healthplex, Inc.

There is an update to a phishing incident in 2021 that impacted more than 89,000 people with Healthplex dental insurance. DataBreaches notes that the NYDFS settlement announced below is not the first settlement stemming from this incident. In December … Continue reading NYDFS Secures $2 Million Cybersecurity Settlement with Healthplex, Inc.→

Thousands more Afghans affected by second data breach, ministers say

Serena Barker-Singh reports: Up to 3,700 Afghans brought to the UK between January and March 2024 have potentially been impacted as names, passport details and information from the Afghan Relocations and Assistance Policy has been compromised again, th… Continue reading Thousands more Afghans affected by second data breach, ministers say→

Kokomo24/7, provider of telehealth services for LAUSD students, reports data breach

Mallika Sheshadri reports: Kokomo Solutions, a technology vendor that provides Los Angeles Unified School District students with telehealth services and a tip line to report suspicious activity, has fallen prey to a data breach. The company noticed “un… Continue reading Kokomo24/7, provider of telehealth services for LAUSD students, reports data breach→