Doctors Community Medical Center in Maryland is notifying an unreported number of patients whose protected health information was potentially compromised by a phishing incident. In January, the center noticed unusual network activity in its payroll system. Their investigation revealed that a number of employees had fallen for a phishing attack and that the attacker(s) had…
Category: U.S.
Saint Francis Ministries Will Be Notifying Patients of Breach
Saint Francis Ministries issued a press release on Friday. It states, in relevant part: On December 19, 2019, Saint Francis became aware of suspicious activity relating to one of its employee’s email accounts. Saint Francis took steps to secure the email account and began working with outside computer forensics specialists to determine the nature and scope of the activity. On February…
Personal Touch and Crossroads Technologies sued after Maze Team attack
As reported by TopClassActions: A former patient says that home health provider Personal Touch failed to protect patients and customers from a ransomware attack on their computerized records. The hospital ransomware class action lawsuit was filed by plaintiff Lugenia Booker, who says that her personal information was included in the computer records of Personal Touch Holding…
A business associate’s response to a breach raises questions of timeliness
I know we’re in the middle of a pandemic, but an incident involving Avalon Health Care Management occurred before all that. And once again, I find myself scratching my head over the timeline in a notification and how Health & Human Services/Office for Civil Rights will view the timeline in terms of compliance with the…
San Francisco Intl Airport discloses data breach after hack
Sergiu Gatlan reports: San Francisco International Airport (SFO) disclosed a data breach after two of its websites, SFOConnect.com and SFOConstruction.com, were hacked during March 2020. According to a notice of data breach sent to all SFO Airport commission employees via an internal memo, the attackers may have gained access to the login credentials of users registered on the two…
U.S. SEC settles with two traders over 2016 EDGAR filing system hack
Reuters reports: The U.S. securities regulator on Thursday said it had settled with two traders who allegedly made money trading on material nonpublic information stolen through a hack into the agency’s EDGAR electronic filing system. The traders were among several defendants charged by the agency last year for a 2016 hack that the Securities and…