You can access their report here. Once again, we saw insider wrongdoing breaches taking a long time to discover. Hacking accounted for 50% of the 46 breaches we recorded for the month, and eight of the hacks also involved extortion demands. If you’re thinking, “That sounds like TheDarkOverlord,” give yourself a pat on the back. Yes, the 8 extortion-hacks were all by TheDarkOverlord.
You can find information on many of the 46 incidents disclosed in September by searching this site. Here is the list of the incidents included in the month’s analyses:
- ABB, Inc.
- Adult Internal Medicine of North Scottsdale
- Alaska Department of Health and Social Services Office of Children’s Services.
- Arkansas Department of Human Services
- Arkansas Oral & Facial Surgery Center
- AU Medical Center
- AUburn Eye Care Associates
- CBS Consolidated, Inc. (CORNERSTONE BUSINESS & MANAGEMENT)
- Children’s Hospital Colorado
- Community Memorial Health System
- Consultants Choice, P.A.
- DaleBrent
- Deer Park PTDC
- Denver Health Medical Center
- Flathead County Schools
- Florida Healthy Kids Corporation
- Hand Rehabilitation Specialists
- Houston Methodist Hospital
- Indiana Health Centers, Inc.
- Kaiser Foundation Health Plan
- Kraig R. Pepper, D.O., P.A.
- La Grange Chiropractic
- Med-Cert, Inc.
- Medical Mutual of Ohio
- Mercy Health Love County Hospital and Clinic
- MetroPlus Health Plan, Inc.
- MN Urology
- Morehead Memorial Hospital:
- Network Health
- Neurology Foundation
- Our Lady of the Angels Hospital
- Patients Choice
- PeaceHealth Southwest Medical Center
- Premier Medical Associates
- Ridgeview Medical Center
- Seven Peaks School
- SMART PT
- Splendora ISD
- Spokane VA Medical Center (Mann-Grandstaff VA Medical Center)
- The MS Center of Saint Louis and Mercy Clinic Neurology – Town and Country
- TRUEbenefits LLC*
- Pittsburgh Medical Center – Bedford
- Unnamed providers
- Urological Associates of Central Jersey P.A.
- UW-Madison Department of Family Medicine and Community Health
- W. Grainger, Inc.
* HHS added this late to its listing with an August 14 reporting date, but it wasn’t really publicly disclosed until mid-September.