June turned out to be a busy month for breach reports involving health/medical data. My worksheet has more than 50 entries and I’m still adding reports as I find them. Today, I found one from Providence Health Plan in Oregon that I thought I’d mention here as it impacted almost 50,000 plan members, and I…
Category: Health Data
Brazil’s Hapvida Discloses Cyber Breach, Potential Client Data Leak
Reuters reports: Brazilian health insurer Hapvida said in a securities filing on Monday it has suffered a cyber attack potentially involving access to the personal information of its customers. Hapvida said, after a preliminary assessment of the security breach, that the attackers did not access customers’ medical records or financial information. Read more on U.S….
Why should the health plan offer credit monitoring in this case? (UPDATED)
I was reading yet another press release about an incident involving protected health information. This one was from Independence Blue Cross in Philadelphia. Let me start by quoting the relevant part and then I’ll meet you on the other side: On May 8, 2020, the Independence Blue Cross Privacy Office was notified that certain member information…
One of Florida’s largest orthopedic providers faces class-action lawsuit after data breach
Is it possible to have a data breach and NOT get sued these days? It doesn’t seem so. Jackie Callaway reports: One of Florida’s largest orthopedic providers is facing a class-action lawsuit after hackers stole personal information from potentially thousands of patients. Attorney John Yanchunis of Morgan & Morgan filed the lawsuit against the Florida…
Misconfigured firewall resulted in LogBox data exposure and conflicting claims
Earlier this week, Jake Bright of TechCrunch reported that security researcher Anurag Sen had found an exposed database belonging to LogBox, a South African medical data app that allows patients to share information with their doctors more easily. According to TechCrunch’s report, the researcher had found an exposed database containing account access tokens for “thousands…
Hakbit ransomware campaign targeting specific European countries
Derek Kortepeter reports: Proofpoint researchers have published findings on a campaign involving the Hakbit ransomware. As their blog post states, the ransomware is being spread via spear-phishing emails targeted at individuals in “mid-level positions across the pharmaceutical, legal, financial, business service, retail, and healthcare sector.” The attacks, described as low-volume, are specifically targeting employees of organizations located in…