June 21, 2024 at 12:13PM UnitedHealth confirmed the exposure of a substantial quantity of medical and patient data in the Change Healthcare ransomware attack. The stolen data includes sensitive health and personal information of a large number of individuals. Notifications will be sent to affected individuals in July, with available resources for data protection and … Read more
June 20, 2024 at 05:56PM Consulting Radiologists recently suffered a cyberattack in which unauthorized parties accessed personal and medical information for 512,000 patients. The breached data included names, addresses, social security numbers, and medical records. The company is providing affected individuals with free credit monitoring and has employed cybersecurity assistance as part of its incident … Read more
June 17, 2024 at 03:56PM The Los Angeles County Department of Public Health suffered a phishing attack on Feb. 19-20, leading to the compromise of 53 employees’ credentials and personal information of over 200,000 people. After disabling affected email accounts, the department launched an investigation and notified law enforcement. Potentially accessed sensitive information includes medical … Read more
June 14, 2024 at 10:27AM Ascension disclosed a ransomware attack compromising the personal and health information of unknown patients. The incident disrupted their electronic health record system, leading to patient diversions and an ongoing investigation. The attack exfiltrated files from seven servers, potentially containing PHI and PII. Ascension is offering free credit monitoring and identity … Read more
June 13, 2024 at 05:57PM Ascension, a large U.S. healthcare system, disclosed that a ransomware attack in May 2024 was caused by an employee’s unintentional download of a malicious file. The attack affected patient records and led to offline devices. While investigation is ongoing, evidence shows stolen data may include Protected Health Information. The attack … Read more
June 11, 2024 at 08:03AM Forescout annually analyzes and presents risk scores for various devices based on configuration, behavior, and function. The score quantifies the risk of a dangerous liaison between threat actors and vulnerable devices. The report aims to increase awareness and prompt urgent attention to specific devices. It is based on fresh data … Read more
May 31, 2024 at 05:34PM Senator Ron Wyden criticized UnitedHealth Group’s CEO for appointing an allegedly unqualified CISO, whom he believes contributed to the company’s recent ransomware attack. Wyden called for an investigation into the company’s failures, citing issues with its CISO’s background, lack of security measures, and a history of negligence. He urged the … Read more
May 28, 2024 at 07:03AM Pharmacy prescription services provider A&A Services, known as Sav-Rx, is notifying 2.8 million individuals of a cyberattack compromising personal information. Though patient care wasn’t disrupted, non-clinical system data was accessed, including names, addresses, email/phone numbers, and Social Security/insurance ID data. The company is not disclosing whether ransomware was used but … Read more
May 24, 2024 at 11:48AM Cencora, a pharmaceutical services provider, suffered a data breach in February 2024 due to a cyberattack, compromising personal data of patients and medication information. This incident has affected major pharmaceutical companies in the US. Cencora has offered affected individuals two years of free identity protection and credit monitoring services. The … Read more
May 23, 2024 at 07:22AM San Antonio healthcare provider CentroMed is notifying 400,000 patients of a recent cyberattack that compromised personal and health data. The breach, discovered on May 1, exposed names, addresses, medical details, financial information, and Social Security numbers. This is the second attack in a year, with the prior incident affecting 350,000 … Read more