Was Yakima Valley Radiology the victim of a cyberattack? They’re not answering that.

On September 24, Karakurt threat actors added Yakima Valley Radiology PC to their leak site. Their listing claimed that they acquired 9.31 GB of files including “financial reports, client lists with contacts, list of patients for 15 years (212579… Continue reading Was Yakima Valley Radiology the victim of a cyberattack? They’re not answering that.

States settle with Morgan Stanley for $6.5 million over data security incidents

In addition to Florida, represented by Consumer Protection Division Multistate and Privacy Bureau Chief Patrice Malloy and Senior Assistant Attorney General Diane Oates, the following states joined the action: Connecticut, Indiana, New Jersey, New York… Continue reading States settle with Morgan Stanley for $6.5 million over data security incidents

CISA Releases The Mitigation Guide: Healthcare and Public Health (HPH) Sector

Today, CISA released the Mitigation Guide: Healthcare and Public Health (HPH) Sector as a supplemental companion to the HPH Cyber Risk Summary, published July 19, 2023. This guide provides defensive mitigation strategy recommendations and best practice… Continue reading CISA Releases The Mitigation Guide: Healthcare and Public Health (HPH) Sector

CMS Notifies Additional Individuals Potentially Impacted by MOVEit Data Breach

As part of an ongoing investigation into the May 2023 data breach of Progress Software’s MOVEit Transfer software on the corporate network of Maximus Federal Services, Inc. (Maximus Federal Services), a contractor to the Medicare program, the Center fo… Continue reading CMS Notifies Additional Individuals Potentially Impacted by MOVEit Data Breach

Is a new ransomware group’s listing for Decatur Independent School District linked to an attack in September?

Decatur Independent School District in Texas was added to Inc Ransomware’s leak site on Wednesday.  There is no summary or description of what the threat actors claim to have done or acquired. There is no countdown clock or timer, and there is no… Continue reading Is a new ransomware group’s listing for Decatur Independent School District linked to an attack in September?

AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC (2)

Earlier today, AlphV added MeridianLink to their leak site. MeridianLink (MLNK) is the provider of a loan origination system and digital lending platform for financial institutions. AlphV’s listing has been temporarily removed to be updated, but … Continue reading AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC (2)