In the process of investigating a ransomware incident, Peachtree Neurological Clinic discovered an earlier hack going back to February 2016. They posted the following notice on their web site: Peachtree Neurological Clinic, P.C. (“PNC”) of Atlanta, Georgia has advised its patients of a privacy event that may have compromised certain personal information. The events are…
Category: Hack
Bupa IPMI notifies customers of insider breach; former employee claimed to have 1million records for sale on dark web
Over on Hot for Security, Graham Cluley beat me to the punch on reporting an insider breach involving Bupa. You can begin by watching Bupa’s public notice, and then read Graham’s report for some more information. Of note, he reports: In all, around 108,000 international health insurance policies are said to be affected. An email…
Singapore Personal Data Protection Commissioner fines ION Orchard
A financial penalty of $15,000 was imposed on Orchard Turn Developments for failing to make reasonable security arrangements to protect personal data of its members that was stored on its server. Orchard Turn Developments was also issued directions to patch all system vulnerabilities already identified, conduct a penetration test and rectify new weaknesses identified, as…
Menlo Park dental practice notifies patients of hack and ransom demand
The following is one of the best notification letters I have ever read. I have sent an email to Dr. Yaley to ask a few questions for clarification and follow-up purposes, as some of this sounds like it could be the work of TheDarkOverlord. Regardless of who the attackers are, however, the notification letter below could…
Foreign hackers probe European critical infrastructure networks: sources
Mark Hosenball reports: Cyber attackers are regularly trying to attack data networks connected to critical national infrastructure systems around Europe, according to current and former European government sources with knowledge of the issue. The sources acknowledged that European infrastructure data networks face regular attacks similar to those which the Washington Post newspaper said on Sunday…
Dark Web Hosting Service Hacked, Some Data Was Stolen
Catalin Cimpanu reports: Deep Hosting — a Dark Web hosting service — admitted yesterday to suffering a major security incident during which “some sites have been exported.” The hack took place on Saturday afternoon and was carried out by a hacker calling himself Dhostpwned, the name he used when he spoke with Bleeping Computer earlier…