Integrated Oncology Network victim of phishing attack; multiple locations affected

HHS added ten listings to its public leak site today, all of which are part of the Integrated Oncology Network (“ION”). According to its substitute notice, on May 9, ION concluded an investigation of a phishing incident that occurred between December 1… Continue reading Integrated Oncology Network victim of phishing attack; multiple locations affected→

HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with Deer Oaks Behavioral Health for $225k and a Corrective Action Plan

In October 2023, Deer Oaks Behavioral Health in Texas disclosed a ransomware attack that affected 171,871 patients, which they discovered on September 1, 2023. LockBit3.0 claimed responsibility at the time and leaked data from the incident. Today, HHS … Continue reading HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with Deer Oaks Behavioral Health for $225k and a Corrective Action Plan→

HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations

Joseph J. Lazzarotti & Rachel A. Jacob of JacksonLewis write: Earlier this year, North Dakota’s Governor signed HB 1127,  which introduces new compliance obligations for financial corporations operating in North Dakota. This new law will take effec… Continue reading HB1127 Explained: North Dakota’s New InfoSec Requirements for Financial Corporations→

Credit reports among personal data of 190,000 breached, put for sale on Dark Web; IT vendor fined

Ian Cheng reports: IT vendor Ezynetic has been fined $17,500 for failing to protect its clients’ data, which resulted in more than 190,000 individuals’ personal data being stolen and put for sale on the Dark Web. Ezynetic had failed to put in place rea… Continue reading Credit reports among personal data of 190,000 breached, put for sale on Dark Web; IT vendor fined→

Russia Jailed Hacker Who Worked for Ukrainian Intelligence to Launch Cyberattacks on Critical Infrastructure

Tushar Subhra Dutta reports: Russian Federal Security Service (FSB) officers have detained two hackers in Siberia who conducted cyberattacks on critical infrastructure facilities under direct orders from Ukrainian intelligence services. The simultaneou… Continue reading Russia Jailed Hacker Who Worked for Ukrainian Intelligence to Launch Cyberattacks on Critical Infrastructure→

Kentfield Hospital victim of cyberattack by World Leaks, patient data involved

While some of us were considering whether Hunters International was in the process of re-branding as World Leaks or not, World Leaks was busy adding a hospital to its leak site. Kentfield Hospital in California is a critical care hospital that speciali… Continue reading Kentfield Hospital victim of cyberattack by World Leaks, patient data involved→

India’s Max Financial says hacker accessed customer data from its insurance unit

Jagmeet Singh reports: Max Financial Services on Wednesday said its insurance subsidiary Axis Max Life Insurance received communication from an anonymous sender about unauthorized access to its customer data. Without disclosing specifics, the Noida-bas… Continue reading India’s Max Financial says hacker accessed customer data from its insurance unit→

Brazil’s central bank service provider hacked, $140M stolen

Do you need yet another reminder of the insider threat? Today’s example is from Brazil and involves an employee of a bank’s software vendor. CoinTelegraph reports: C&M Software, the service provider that connects Brazil’s Central Bank t… Continue reading Brazil’s central bank service provider hacked, $140M stolen→

Iranian and Pro-Regime Cyberattacks Against Americans (2011-Present)

Annie Fixler writes: Since 2011, the Islamic Republic of Iran and pro-regime hackers have increasingly utilized digital technology to threaten U.S. national security, conducting dozens of cyber operations against Americans. Recently, on June 30, the U…. Continue reading Iranian and Pro-Regime Cyberattacks Against Americans (2011-Present)→