US Healthcare at risk: Strengthening resiliency against ransomware attacks

Microsoft writes: The healthcare sector faces a rapidly increasing range of cybersecurity threats, with ransomware attacks emerging as one of the most significant. A combination of valuable patient data, interconnected medical devices, and small IT/cyb… Continue reading US Healthcare at risk: Strengthening resiliency against ransomware attacks

Cardiology of Virginia patient data appears to be up for sale. Has the entity issued any statement at all?

On September 7, RansomHub added Cardiology of Virginia to its dark web leak site, claiming that about 1 TB of files had been acquired. DataBreaches assumes no payment agreement was struck as RansomHub subsequently leaked data, complete with a filelisti… Continue reading Cardiology of Virginia patient data appears to be up for sale. Has the entity issued any statement at all?

Snowflake to Close Hacking Probe Into Attack Targeting Clients

Charles Gorrivan and Brody Ford report: Snowflake Inc. plans to close its own investigation this week into a hacking campaign that ensnared as many as 165 of its customers. The cloud data and analytics company hasn’t detected any unauthorized access in… Continue reading Snowflake to Close Hacking Probe Into Attack Targeting Clients

Google Database Reveals Thousands of Privacy Incidents

Joseph Cox reports: Google has accidentally collected childrens’ voice data, leaked the trips and home addresses of car pool users, and made YouTube recommendations based on users’ deleted watch history, among thousands of other employee-reported priva… Continue reading Google Database Reveals Thousands of Privacy Incidents

Ca: New online breach reporting forms for federal institutions and businesses

From the Office of the Privacy Commissioner of Canada, May 24: The Office of the Privacy Commissioner of Canada (OPC) has launched a new online breach reporting form for federal institutions subject to the Privacy Act as well as updated its online brea… Continue reading Ca: New online breach reporting forms for federal institutions and businesses

Swiss law enforcement actions appear linked to seizure of BreachForums

There have been a few developments likely related to the seizure of BreachForums. As a preview, recall that Kantonspolizei Zürich was one of the cooperating entities in the takedown and that the seizure notice had two avatars behind bars. One avatar wa… Continue reading Swiss law enforcement actions appear linked to seizure of BreachForums

Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

Zack Whittaker reports: The ransomware gang that hacked into U.S. health tech giant Change Healthcare used a set of stolen credentials to remotely access the company’s systems that weren’t protected by multifactor authentication (MFA), according to the… Continue reading Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

Cybersecurity firm suspects Russia-linked hacking group behind cyberattack on Texas water facility

Tom Olson reports: A hacking group with ties to the Russian government is suspected of carrying out a cyberattack in January that caused a tank at a Texas water facility to overflow, experts from US cybersecurity firm Mandiant said Wednesday. The attac… Continue reading Cybersecurity firm suspects Russia-linked hacking group behind cyberattack on Texas water facility

Ie: Authorities investigating ransomware attack on charity that works with vulnerable children

The Journal reports: A police investigation has been launched after a charity that works with vulnerable children suffered a data breach in a ransomware attack. Extern, a cross-border social justice charity with offices in Belfast and Co Kildare, has c… Continue reading Ie: Authorities investigating ransomware attack on charity that works with vulnerable children