On Thursday morning, ThreeAM added Carolina Arthritis to its leak site. Some ransomware groups add a listing, post some claims and a few screencaps, and then give the entity a deadline to pay up, or they leak a bit of data and then give the entity a final deadline. ThreeAM doesn’t seem to work that…
Category: Health Data
Indian court tells Star Health to share details of leak so Telegram can delete chatbots
Reuters reports: An Indian court in the southern state of Tamil Nadu has told insurer Star Health to help Telegram identify data leaked via its messaging app so the chatbots can be deleted. The country’s biggest insurer with roughly $4 billion market cap approached the Madras High Court in the southern state of Tamil Nadu…
OnePoint Patient Care notifies almost 800,000 patients of August ransomware attack
On September 15, INC Ransom added OnePoint Patient Care to its leak site. The threat actors claimed to have encrypted the hospice dispensing pharmacy and pharmacy benefits management service’s files. It wasn’t long after that INC leaked all of the data. The Arizona-based provider notified HHS of the incident on October 14, reporting that 795,916…
Cardiology of Virginia patient data appears to be up for sale. Has the entity issued any statement at all?
On September 7, RansomHub added Cardiology of Virginia to its dark web leak site, claiming that about 1 TB of files had been acquired. DataBreaches assumes no payment agreement was struck as RansomHub subsequently leaked data, complete with a filelisting, youtube video, and other files. “For bulk archive and confidential data analyzes trough our own…
Madras High Court dismisses petition seeking probe into Star Health Insurance data breach
Ayesha Arvind reports: The Madras High Court Wednesday dismissed the petition filed by cyber security researcher Himanshu Pathak seeking a probe into the alleged data breach at national insurance firm, Star Health Insurance. Justice M Dhandapani dismissed Pathak’s petition after noting that a civil suit filed by Star Health last year dealing with the same issue is already pending…
The Global State of Internet of Healthcare Things (IoHT) Exposures on Public-Facing Networks
Censys recently published a new research report that looks at exposed data on the internet involving healthcare devices and systems connected to PHI. Here’s their Executive Summary: Censys discovered 14,004 unique IP addresses exposing healthcare devices and data systems connected to potentially sensitive medical information on the public internet. These exposures greatly raise the risk of unauthorized…