Cuba ransomware gang demands $1.9 million for decryption key; Rock County refuses

WCLO reports an update to the ransomware attack experienced by Rock County, Wisconsin in September after they were attacked by the Cuba ransomware gang: Rock County officials are refusing to pay the $1.9 million hackers are seeking to unlock files that… Continue reading Cuba ransomware gang demands $1.9 million for decryption key; Rock County refuses

Personal Touch Holding settles NY Attorney General’s lawsuit stemming from 2021 ransomware incident: will pay $350k, improve security

From a press release from the NYS Attorney General’s Office today: New York Attorney General Letitia James today secured $350,000 from a Long Island-based home health care company, Personal Touch Holding Corporation (Personal Touch), for failing … Continue reading Personal Touch Holding settles NY Attorney General’s lawsuit stemming from 2021 ransomware incident: will pay $350k, improve security

UPDATE: D.C. Board of Elections data breach contained fewer than 4,000 D.C. voters’ data

On October 6, DataBreaches reported a breach allegedly containing more than 600,000 lines of data on registered voters in D.C., where, according to the threat actors who listed it, each line represented one voter’s records. Although there may hav… Continue reading UPDATE: D.C. Board of Elections data breach contained fewer than 4,000 D.C. voters’ data

Inmediata settles multi-state litigation for $1.14 million; will improve data security and breach notification practices

Indiana Attorney General Rokita led a coalition of 33 attorneys general in a multi-state investigation and litigation against health care clearinghouse Imnediata stemming from a breach disclosed in 2019. Background In January 2019, HHS OCR alerted Inme… Continue reading Inmediata settles multi-state litigation for $1.14 million; will improve data security and breach notification practices

NV: Personal information accessed in Clark County School District cybersecurity incident

C.C. McCandless reports: The Clark County School District announced that a recent cybersecurity incident allowed an “unauthorized party” to access personal information of some students, parents and employees. The district said it became aware of the ha… Continue reading NV: Personal information accessed in Clark County School District cybersecurity incident

Cook County Health and Hospitals System terminates relationship with medical transcription service, notifying patients of breach

On September 24, Cook County Health and Hospitals System (CCH) in Illinois notified HHS of a breach. At the time, CCH reported that 500 patients were affected. The “500” entry is usually just a marker to indicate that the entity knows that … Continue reading Cook County Health and Hospitals System terminates relationship with medical transcription service, notifying patients of breach