Mathew J. Schwartz reports: Admitted Mirai malware mastermind Daniel Kaye, 29, has been extradited from Germany to the United Kingdom, where he faces charges that he launched cyberattacks against two of Britain’s biggest banks. Kaye, a British national from Surrey, England, returned to Britain Wednesday in the custody of officers of the National Crime Agency…
Month: August 2017
Medical Oncology Hematology Consultants notifies 19,203 patients after ransomware incident
Medical Oncology Hematology Consultants, PA in Delaware recently reported a ransomware attack to HHS that affected 19,203 patients. The attack began on June 17, but wasn’t discovered until July 7. The practice notes that there was no indication that any PHI was accessed, much less acquired. I was impressed by their robust response to the incident…
This giant ransomware campaign just sent millions of malware-spreading emails
Danny Palmer reports: Once considered almost dead, the Locky strain of ransomware has continued its resurgence with a new email distribution campaign, which researchers say is one of the largest malware campaigns of this half of the year. Over 23 million messages containing Locky were sent in just 24 hours on 28 August, with the…
Yahoo must face litigation by data breach victims: U.S. judge
Jonathan Stempel reports: A U.S. judge said Yahoo must face nationwide litigation brought on behalf of well over 1 billion users who said their personal information was compromised in three massive data breaches. Wednesday night’s decision from U.S. District Judge Lucy Koh in San Jose, California, was a setback for efforts by Verizon Communications Inc,…
Yet another breach due to envelope windows?! CVS Caremark exposes patients’ HIV status in mailings
I can almost hear Yogi Berra saying, “It’s deja vu all over again.” Lou Chibbaro Jr. reports: CVS Caremark, a division of the CVS pharmacy and healthcare company, abruptly discontinued a mailing last week to patients in Ohio receiving HIV-related medication from the company after it learned that a reference to “HIV” appeared above the…
Instagram alerts high-profile users their data may have been accessed
Selena Larson reports: Instagram is alerting high-profile users that someone could have accessed their phone number and email address through a bug in its software. In an email sent to verified users on Wednesday, Instagram said that no account passwords were accessed, and the bug has been fixed. It is reminding those people to use…