Russian man with Kremlin ties gets 9 years in US prison for hacking and insider trading scheme

Alanna Durkin Richer reports: A wealthy Russian businessman with ties to the Kremlin was sentenced Thursday to nine years in prison for his role in a nearly $100 million stock market cheating scheme that relied on secret earnings information stolen thr… Continue reading Russian man with Kremlin ties gets 9 years in US prison for hacking and insider trading scheme

An inexcusable gap from breach to notification, or an excusable one?

Some state and federal laws provide specific timeframes by which breached entities must provide notice to regulators and to those affected by a data breach. Unfortunately, loopholes abound, as we seen in statutory language such as Minnesota’s bre… Continue reading An inexcusable gap from breach to notification, or an excusable one?

Schneck Medical Center settles Indiana Attorney General’s lawsuit over 2021 data breach

Jackson County Schneck Memorial Hospital (Schneck Medical Center) was a victim of a cyberattack in 2021. Its 2021 and 2022 disclosures about the breach and its lack of timely breach notification resulted in a potential class action lawsuit filed in 202… Continue reading Schneck Medical Center settles Indiana Attorney General’s lawsuit over 2021 data breach

Rite Aid, one of many victims in MOVEit breach, sued for negligence

Rite Aid was one of numerous entities affected by the massive MOVEit breach. In July, they disclosed that 24,400 patients’ pharmacy information including medication names and dates of fill, prescriber information and limited insurance information… Continue reading Rite Aid, one of many victims in MOVEit breach, sued for negligence

More than a year later, Lifeline Health Systems notifies 75,000 people of a data breach

Lifeline Health Systems is a HIPAA-covered entity, although not all the data involved in their 2022 breach was protected health information. Some of the data related to employees and family members. But here’s the timeline Lifeline provides in th… Continue reading More than a year later, Lifeline Health Systems notifies 75,000 people of a data breach

The Government Isn’t Sure How to Get Small Hospitals to Take Cybersecurity Seriously

Eric Geller reports: The U.S. government is struggling to convince hospitals that they need to spend time and money fighting hackers and provide useful advice to them, a problem that could have lethal consequences as the country’s ransomware crisis rag… Continue reading The Government Isn’t Sure How to Get Small Hospitals to Take Cybersecurity Seriously

Bienville Orthopaedic Specialists notifies 243,000 patients of cyberattack

On April 1, DataBreaches reached out to Bienville Orthopaedic Specialists (BOS) in Mississippi to ask about a claim by Abyss threat actors that they had compromised BOS. BOS never replied. But now, five months later, BOS submitted a breach notification… Continue reading Bienville Orthopaedic Specialists notifies 243,000 patients of cyberattack