134K Massachusetts residents impacted by ‘global security incident’

Stacey Scott reports: Massachusetts health officials are warning over 134,000 individuals who are currently or were previously enrolled in certain state programs that their personal information has been involved in a recent third-party data security br… Continue reading 134K Massachusetts residents impacted by ‘global security incident’

United Bank Notifies Individuals of MOVEit Breach Involving Camden-Clark Physician Corporation and Camden-Clark Memorial Hospital Corporation

United Bank, a financial services institution which provides banking services to Camden-Clark Physician Corporation, a physicians’ group practice located in Parkersburg, W.V. and Camden-Clark Memorial Hospital Corporation (collectively “Camden-Clark”),… Continue reading United Bank Notifies Individuals of MOVEit Breach Involving Camden-Clark Physician Corporation and Camden-Clark Memorial Hospital Corporation

Colorado Department of Health Care Policy & Financing reports more than 4 million affected by MOVEit breach

As I tooted earlier this morning on Infosec.Exchange: One of the MOVEit victims was the Colorado Department of Health Care Policy & Financing, which was notified by IBM of the data breach. According to their notification, the information types incl… Continue reading Colorado Department of Health Care Policy & Financing reports more than 4 million affected by MOVEit breach

Nova Scotia government still unsure of widespread impact from spring cyberattack

Jonathan MacInnis reports: The province of Nova Scotia is still unsure of how widespread the MOVEit security breach is, nearly two-and-a-half months after first becoming aware of the issue. Almost 1000 notifications have been sent out this month. “As y… Continue reading Nova Scotia government still unsure of widespread impact from spring cyberattack

Parathon by JDA eHealth Systems hit by Akira? They haven’t responded to inquiries.

Visitors to Akira’s dark web leak site are greeted with a message: Well, you are here. It means that you’re suffering from cyber incident right now. Think of our actions as an unscheduled forced audit of your network for vulnerabilities. Ke… Continue reading Parathon by JDA eHealth Systems hit by Akira? They haven’t responded to inquiries.

Gallivan notifies University of Guelph students of Fortra breach 4 months later

Daniel Caudle reports: The provider of health, dental, and wellness benefits at the University of Guelph (U of G) has begun notifying students of a data breach which included access to personal information. A post on the Central Student Association’s w… Continue reading Gallivan notifies University of Guelph students of Fortra breach 4 months later

Hobbs has questions about data breach that exposed ESA student info

Gloria Rebecca Gomez reports: A data breach exposed the personal information of thousands of Arizona students enrolled in the state’s school voucher program, according to Gov. Katie Hobbs, but the state’s top education official says it’s not a problem…. Continue reading Hobbs has questions about data breach that exposed ESA student info

Centers for Medicare and Medicaid notifying 645,000 Medicare members about MOVEit breach

The Centers for Medicare and Medicaid (CMS) has posted a notice on its site about a data breach at one of its contractors, Maximus Federal Services, Inc. Maximus was one of hundreds of victims of a 0day attack on MOVEit file transfer software by the Cl… Continue reading Centers for Medicare and Medicaid notifying 645,000 Medicare members about MOVEit breach

Read more Health3PT Releases Blueprint for Third Party Risk Management to Fix the Ineffective Cyber Risk Assessment Process for the Healthcare Industry

Survey finds 60% of covered entities and 72% of their vendors believe today’s third-party risk management practices are not effective: new guidance provides a consistent set of practices to reduce cyber risk for the health industry FRISCO, Texas–… Continue reading Read more Health3PT Releases Blueprint for Third Party Risk Management to Fix the Ineffective Cyber Risk Assessment Process for the Healthcare Industry