Colonial Park Realty Co. (Enders Insurance) issued a press release about a data breach that occurred last April when an employee’s email account was compromised. The breach was discovered on May 7, 2020, and they have been investigating since then, it seems, to find out who was impacted. Enders claims that they are notifying “in…
Category: Health Data
Florida: Personal and Prescription Information Found on Side of Road
Heather Crawford reports that First Coast News has been investigating papers found on the side of the road in St. Johns County. The papers, that included a prescription bag with prescription records and a nursing home’s information, appeared to come from a luxury senior living community in Jacksonville. “The pharmacy name on everything is Guardian…
Cybercriminal sells credentials of French hospital workers
François Manens reports (translation): 50,000 user accounts of French hospital agents are for sale on a cybercriminal forum. This data could allow buyers to access the computer networks of certain health establishments. Once introduced to the system, criminals can deploy their ransomware and cripple the hospital. New alert for French hospitals, this time launched by the monitoring site…
Amber Group breaks silence on unsecured storage bucket; NatSec minister suggests TechCrunch reporter may have violated CyberCrime Act
The Gleaner reports a follow-up on an unsecured storage server exposing personal information and COVID-related information of travelers to Jamaica. The exposed bucket was first reported by Zack Whittaker of TechCrunch on February 17: The storage server, hosted on Amazon Web Services, was set to public. It’s not known for how long the data was…
IT: Guarantor for privacy: two hospitals and one AUSL sanctioned
Marco De Felice reports: The Guarantor for privacy has sanctioned two hospitals and an AUSL, they had communicated medical information to the wrong people. The three structures fined are the Sienese University Hospital , the University Hospital of Parma and the Romagna Local Health Authority . The two hospitals received a fine of €10,000, while for the Romagna AUsl the fine was €50,000. ……
SG: Undertaking by StarMed Specialist Centre Pte Ltd
The Personal Data Protection Commission of Singapore announced a new undertaking this week. The incident that led to the investigation was a ransomware attack on a medical entity, and findings included that the entity had left RDP open and had weak login credentials, among other concerns. The undertaking was to get them to harden their…