Chaitraly Deshmukh reports: The Cybercrime cell of the Pune city police have arrested seven people in connection with the major hacking of Cosmos Bank servers. The hackers had managed to withdraw Rs 94.42 crores last month by hacking into the servers of the Pune branch of Cosmos Bank. The hackers transferred Rs 94.42 crore to…
Category: Breach Incidents
Commentary: What Constitutes Negligence in Company Data Breaches?
Amy L. Hanna Keeney of Adams and Reese writes about an opinion in a court case that stemmed from one of TheDarkOverlord’s hacks: their attack on Athens Orthopedic Clinic (AOC). I had covered that breach extensively, including commenting on the fact that AOC did not offer any free services to patients whose data had not…
Data of almost 3,000 patients experiencing emergency symptoms exposed online by MedCall Advisors
Have you ever wished you could just pick up a phone and get an emergency room physician on the phone to advise you in an emergency? Well, it seems that you can. According to their website, North Carolina-based Medcall Advisors is a “Workers Compensation and Healthcare Solutions” provider offering a comprehensive tele-emergent care medical service…
BCBS of Rhode Island blames vendor for breach of member information
G. Wayne Miller reports: Blue Cross & Blue Shield of Rhode Island has disclosed a breach of personal health-care information affecting 1,567 people that the insurer blames on an unnamed vendor responsible for sending benefits explanations, also known as health-care services summaries, to members. In a media release Tuesday afternoon, the insurer said that some…
Mt. Diablo School District notifies parents of data breach
And while we mutter and grumble about #EdTech glomming up way too much personal and sensitive information on students, let’s not forget that good old-fashioned email errors are still causing problems. In today’s episode, the Mt. Diablo School District reports that an error on August 8 was caught after 200 of 650 emails were sent…
Fetal Diagnostic Institute of the Pacific notifies 40,800 patients after ransomware attack
From their public notice of August 30, below, it appears that the attack was disovered on June 30. The incident was reported to HHS as impacting 40,800 patients. While the notification below meets all the regulatory requirements, I wish entities would routinely just disclose how malware was injected and what kind of malware it was….