Keystone Health in Pennsylvania is notifying 235,237 patients about an incident they describe on their website: On August 19, 2022, we identified an incident that temporarily disrupted our computer systems. We reported the incident to law enforcement and worked with a third-party cybersecurity firm to determine what happened. Our investigation found that an unauthorized party…
Category: Health Data
Phishing incident may have exposed Seton patient names, clinical information
Jack Dowling reports: A vendor associated with Seton Medical Center in Harker Heights was recently the victim of a phishing incident, according to a news release from the hospital late Friday afternoon. According to the center, an unauthorized agent accessed the email accounts of two of the vendor’s employees. Read more at KDH News.
Bits ‘n Pieces (Trozos y Piezas)
Es-CT: Update on Consorci Sanitari Integral Attack by RansomExx Last week, DataBreaches reported an attack on the Consorci Sanitari Integral (CSI) system of hospitals and health centers in Catalonia. Since then, RansomExx claimed responsibility for the attack and claims to have 54 GB of files that include DNI and medical information of patients and employees….
Ca: Inappropriate pictures of long-term care residents raise questions in House of Assembly
Bernice Hiller reports: Allegations that long-term care staff in the Baie Verte hospital took inappropriate pictures of residents made it to the floor of the House of Assembly, as politicians asked and answered questions about the possible privacy breach. Central Health is investigating the allegations, along with the RCMP and Newfoundland and Labrador’s privacy commissioner. Read more…
NHS vendor Advanced won’t say if patient data was stolen during ransomware attack
Carly Page reports: Advanced, an IT service provider for the U.K.’s National Health Service (NHS), has confirmed that attackers stole data from its systems during an August ransomware attack, but refuses to say if patient data was compromised. Advanced first confirmed the ransomware incident on August 4 following widespread disruption to NHS services across the U.K. The attack…
Australia’s Medibank reports cyber incident, shares on trading halt
Reuters reports: Australian health insurer Medibank Private (MPL.AX) said on Thursday it will isolate and remove access to some customer-facing systems as it detected unusual activity on its network. The company said it took “immediate steps to contain the incident, and engaged specialised cybersecurity firms”, adding that there was no evidence that any sensitive data,…