Fahmida Y. Rashid writes: Ransomware attacks are increasingly using the Remote Desktop Protocol as the initial entry vector, taking advantage of the fact that many enterprises struggle to balance the risks of exposing RDP and the advantages of being able to access machines in multiple locations. The Institute for Critical Infrastructure and Technology highlighted the…
Category: Breach Incidents
MY: Health Ministry investigating leak of patient records
Sira Habibu reports: KUALA LUMPUR: The Health Ministry is investigating reports of a data leak involving the patient records of nearly 20,000 Malaysians. […] He was responding to the Sept 16 report by Greenbone Network report claiming that information on 19,992 radiological reports from Malaysia was freely accessible on computer servers worldwide. Read more on…
Little Rock Plastic Surgery releases statement after internal HIPAA breach
KATV reports: A Little Rock plastic surgery clinic released a statement on Friday about a HIPAA breach that happened in July. According to a statement from Little Rock Plastic Surgery, it was discovered on or about July 15, 2019, that a nurse downloaded reports, photos, and other information that contained Protected Health Information of several…
Credit card data from Russell Stover breach shows up for sale on the dark web
In an August 30th press release, posted previously on DataBreaches.net, chocolatier Russell Stover disclosed that point-of-sale (POS) terminals in their retail stores appeared to have been compromised by malware. Online customers were reportedly not at risk, but based on its investigation up until that date, they believed that the attacker may have been able to…
Premier Family Medical in Utah notifying 320,000 patients of ransomware incident
Premier Family Medical in Utah is notifying 320,000 patients of a ransomware incident that they disclosed in August. The incident has now been posted on HHS’s public breach tool after the physician group notified HHS several days ago. In an August 30th notice on their website, practice explained that on July 8, they experienced a…
Face Recognition App Leaks Photos Of Suspects From Madurai Police Database
Kritti Bhalla reports: In a major privacy breach, Tamil Nadu police’s Madurai unit’s database of thousands of ‘suspected criminals’ was made public without its knowledge. The database included names and photographs of the people under the scanner. The leaked data also included OTP codes, administrator password and details of the police officers using the app….