On Thursday, I reported on a potential class action lawsuit that had been filed against two hospitals in Puerto Rico that suffered a ransomware attack. As I noted in my post, none of the named plaintiffs claimed that they had suffered any concrete injury or harm other than the cost and time involved in monitoring…
Category: Breach Incidents
Relation Insurance Discloses Data Security Incident
The following is part of Relation Insurance’s disclosure notice, published February 13 on their site: What Happened? Relation Insurance Inc. (“Relation”) provides insurance brokerage services working with certain insurance providers, and we are issuing notice of a recent event that may impact the privacy of certain personal information. To date, Relation has not received any…
Mississippi Center for Legal Services and North Mississippi Rural Legal Services hit by Ryuk ransomware on Christmas Eve
A Public Notice by Mississippi Center for Legal Services and North Mississippi Rural Legal Services of February 5 begins: The purpose of this communication is to post notice that Mississippi Center for Legal Services and North Mississippi Rural Legal Services, [MCLSC/NMRLS] has been the victim of a ransomware computer system attack that has resulted in…
Maze Team continues naming victims and dumping data…
I haven’t had time nor inclination to investigate all of Maze Team’s claimed victims, but of course, I have kept an eye out for ones involved health data or student data. Thanks to HealthITSecurity, I learned that the threat actors also attacked a chiropractic practice in South Dakota. The practice, called All About Potential Family…
More Maze Team victims are revealed
A few developments concerning ransomware attacks by Maze Team: Crossroads Technologies notifies a covered entity about ransomware attack I think I finally have some information on the Crossroads attack claimed by Maze Team on their site. So far, no one — not Crossroads Technologies and not CrossroadsNet have answered my repeated inquiries, despite the fact…
SpiceJet dismisses data breach report of 1.2 million passengers
ANI reports: India’s privately-owned airline SpiceJet has denied the data breach reports of about a million passengers. The airline also said that there was no security lapse in its systems. “There was no data breach in any of SpiceJet’s servers. At SpiceJet, safety and security of our fliers’ data is sacrosanct. Our systems are fully capable and…