Daphne Zhang reports: Owners Insurance Co. convinced the Ohio Supreme Court that it has no duty to cover a medical software company’s ransomware-related losses because the attack didn’t cause any property damage. EMOI Services LLC’s insurance policy “requires direct physical loss of or damage to media—Computer software cannot experience direct physical loss or physical damage, because…
Author: Dissent
NZ: Compliance investigation into Mercury IT breach commenced
Here’s yet another data breach case in which a court has issued a protective order. The New Zealand Privacy Commissioner writes about a court order issued after the LockBit attack on Mercury IT that might contribute to a supply chain attack; Justice Grice has released the reasons for making the interim orders this week. The High Court…
Updating the Lake Charles Memorial Health System data breach
On Oct. 25, the Hive ransomware team notified Lake Charles Memorial Health System that they had been in their system for 12 days and had exfiltrated 270 GB of the hospital, employee, and patient data. As Hive informed the health system and DataBreaches, Hive had exfiltrated data but not locked it. They demanded $900,000 to…
“No need to hack when it’s leaking:” the “Here’s how you get a HIPAA complaint” edition
So… regular readers know that DataBreaches has occasionally reported on data security incidents in the healthcare sector that involved leaks due to misconfigurations of GitHub repositories, storage buckets, open directories, etc. Not all of this site’s attempts to disclose leaks responsibly have gone smoothly, as described in a collaborative paper written with Dutch researcher Jelle…
St. Rose Hospital patient data appears on hacking forum (UPDATE1)
On December 20, a listing appeared on a popular forum that offered documents allegedly from St. Rose Hospital in Hayward, California. The listing was not a sales listing but rather a “demo data pack” listing of what was described as documents from a leak. The total leak allegedly contains 1.7 TB of files with: Financial…
Developing: Moroccan court orders extradition of alleged member of ShinyHunters to U.S.
Since July of 2022, DataBreaches has been reporting on the case of Sébastien Raoult, a young French national detained in Morocco on an Interpol Red Notice requested by the U.S. for alleged involvement in ShinyHunters. Yesterday, Morocco’s Court of Cassation notified Raoult that they signed the order for his extradition to the U.S. According to…