Matt Burgess reports: A hacker used a basic security vulnerability to access highly sensitive files relating to the US military’s spy drones and tanks, new research claims. Security firm Recorded Future says it discovered a criminal attempting to sell the secret information for only a few hundred dollars on a dark web forum last month….
Month: July 2018
DOJ backtracks on linking OPM hack to loan fraud case
From the not-surprised dept.: I had suggested previously that claims that data used in identity theft came from the OPM hack were not very convincing. Now the government has walked back any claim that the data did come from the OPM hack. Mark Rockwell reports: The Justice Department said it jumped the gun with a…
Follow-Up: MedEvolve provides notice of leaky FTP server
On May 16, DataBreaches.net reported on a breach involving MedEvolve. The breach had been reported to this site by an independent researcher, who had found that some of MedEvolve’s clients’ patient information was exposed on a public FTP server with no login required. The MedEvolve incident was included in the May statistics compiled for Protenus’s…
MO: Cass Regional responds to ransomware attack
A special statement from Cass Regional HOSPITAL NEWS | MONDAY, JULY 9, 2018 At approximately 11 a.m. this morning, Cass Regional Medical Center became aware of a ransomware attack on its information technology infrastructure. Affected areas include internal communication systems and access to the organization’s electronic health record (EHR). At this time, there is no…
NZ: Investigation, apology after doctor loses confidential breast cancer patient files
Kirsty Johnston reports: A doctor lost a file containing highly sensitive information about breast cancer patients, while walking between a hospital and a radiation clinic, it has emerged. Police have been called over the blunder amid fears someone has found the document and plans to make it public. Both agencies involved – Southern District Health…
MSK Group notifying patients of data security incident
MSK Group in Tennessee, and its divisions, OrthoMemphis, Memphis Orthopaedic Group, Tabor Orthopedics, and Crosstown Back & Pain Institute, are notifying patients of a data security incident that they discovered on May 7. In a notification letter dated July 5 and signed by Kimble L. Jenkins, CEO, the orthopedic group offered those affected free services with…