Southwestern Ontario hospitals will rebuild network from scratch amid fallout from cyberattack; more data leaked

CBC reports: All five southwestern Ontario hospitals impacted by a cyberattack just over two weeks ago will rebuild their networks from scratch, the hospitals say in an update Wednesday. But the hospitals also say the investigation into precisely whose… Continue reading Southwestern Ontario hospitals will rebuild network from scratch amid fallout from cyberattack; more data leaked

Attorney General James Secures $450,000 from US Radiology Specialists for failing to protect patient data

The following press release from the NYS Attorney General’s Office relates to an incident previously noted on DataBreaches.net. The Assurance of Discontinuance provides details on the breach not previously known to this site and serves as a remin… Continue reading Attorney General James Secures $450,000 from US Radiology Specialists for failing to protect patient data

FBI: Ransomware Actors Continue to Gain Access through Third Parties and Legitimate System Tools

FBI Private Industry Notification TLP:CLEAR November 7, 2023 Summary The Federal Bureau of Investigation (FBI) is releasing this Private Industry Notification to highlight ransomware initial access trends and encourage organizations to implement the re… Continue reading FBI: Ransomware Actors Continue to Gain Access through Third Parties and Legitimate System Tools

Update: Sensitive patient data leaked from TransForm ransomware incident

As predicted, Daixin has leaked the third part of the data they exfiltrated from TransForm and Canadian healthcare entities. DataBreaches reported the first leak when Daixin publicly claimed responsibility for the attack. The second leak followed two d… Continue reading Update: Sensitive patient data leaked from TransForm ransomware incident

Virginia’s Fairfax Schools Expose Thousands of Sensitive Student Records

Linda Jacobson reports: Virginia’s Fairfax County Public Schools disclosed tens of thousands of sensitive, confidential student records, apparently by accident, to a parent advocate who has been an outspoken critic of its data privacy record. The docum… Continue reading Virginia’s Fairfax Schools Expose Thousands of Sensitive Student Records

It took an HHS complaint, but three years later, some Ventura Orthopedic patients are finally being notified of a ransomware attack

In August 2020, DataBreaches reported that the Maze ransomware gang had added Ventura Orthopedics to their name-and-shame leak site. At the time, Ventura did not respond to inquiries about whether they would confirm or deny the claims. And they did not… Continue reading It took an HHS complaint, but three years later, some Ventura Orthopedic patients are finally being notified of a ransomware attack

Exclusive: Daixin Team claims responsibility for attacks affecting Canadian hospitals, starts leaking data

  Daixin Team is now claiming responsibility for — and leaking data from — an attack that has significantly impactedF five Canadian hospitals in Ontario. TransForm Shared Service Organization provides IT, supply chain, and accounts pay… Continue reading Exclusive: Daixin Team claims responsibility for attacks affecting Canadian hospitals, starts leaking data

HHS announces its first settlement in a ransomware case: Doctors’ Management Services

From HHS, this interesting press announcement: Today, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement under the Health Insurance Portability and Accountability Act (HIPAA) with Doctors’ Manag… Continue reading HHS announces its first settlement in a ransomware case: Doctors’ Management Services

Colorado GOP Wants Inquiry into Delayed Notification of Data Breach

David Migoya reports: Colorado House Republican leaders on Monday called for an investigation into why Colorado’s higher education agency allegedly failed to timely report a massive data breach this summer. In a two-page letter hand-delivered to … Continue reading Colorado GOP Wants Inquiry into Delayed Notification of Data Breach