HIPAA requires that covered entities notify HHS and affected patients of a reportable breach within 60 calendar days of discovery of a breach. Exceptions are made if law enforcement asks an entity to delay notification so as not to interfere with an investigation, but such requests are infrequent. So why are we first finding out…
Category: U.S.
Cuba ransomware claims cyberattack on Philadelphia Inquirer
Bill Toulas reports: The Cuba ransomware gang has claimed responsibility for this month’s cyberattack on The Philadelphia Inquirer, which temporarily disrupted the newspaper’s distribution and disrupted some business operations. The Philadelphia Inquirer is Philadelphia’s largest (by circulation) newspaper. It is the third-longest continuously operating daily newspaper in the U.S., founded in 1829, and it has…
After ransomware attack, state’s second-largest health insurer says patient data were stolen
Jessica Bartlett reports: The second-largest health insurer in Massachusetts said that patient data had been copied and taken from its systems during a recent data breach and that it is notifying patients that their information may have been compromised. Point32Health, which is the parent company of Tufts Health Plan and Harvard Pilgrim Health Care, has been actively…
CommonSpirit expects to recover most of its $160M cyberattack costs
Nick Thomas reports: Chicago-based CommonSpirit, one of the largest nonprofit health systems in the nation, upped its current estimate of losses stemming from a cyberattack in October to $160 million when it released first-quarter results May 15. The original cost amount was estimated at $150 million. The better news is that the 143-hospital system is confident of…
Hacker Sentenced to 51 Months in Prison for Stealing Customer Credit Card Numbers
PHOENIX, Ariz. – Chirag Patel, 38, most recently of Norfolk, Virginia, was sentenced on May 8, 2023, by United States District Judge G. Murray Snow to 51 months in prison, followed by three years of supervised release. He also was ordered to pay $87,522.25 in restitution. Patel pleaded guilty to Computer Fraud. On numerous occasions…
Peachtree Orthopedics alerts patients to cyberattack; third patient data breach in seven years
An Atlanta clinic alerts patients to at least its third incident involving patient data in seven years. Karakurt threat actors recently added Peachtree Orthopedics in Atlanta (Peachtree Orthopaedic Clinic, P.A.) to their leak site. As often seems to be the case with Karakurt listings, the date on Karakurt’s post is somewhat confusing, and they make…