Update of May 6: Although neither the clinic nor the attackers have confirmed it yet, this attack appears to be the work of BianLian, whose obfuscated description on their leak site matches Murfreesboro’s description. BianLian claims to have over 250 GB of files. Carmyn Gutierrez and Caleb Wethington report: The Murfreesboro Medical Clinic & SurgiCenter was…
Category: U.S.
MA: Lawrence Family Development Charter School allegedly attacked by Snatch Team
Threat actors known as Snatch Team added the Lawrence Family Development Charter School in Massachusetts to their leak site yesterday. No proof has been provided by the attackers at this point. Two attempts to contact LFCDS administrators through their website contact forms for messages to faculty and staff both failed with messages “{“statusText”:”*** Forbidden. You…
Merck entitled to $1.4B in cyberattack case after appeals court rejects insurers’ ‘warlike action’ claim
Angus Liu reports: Merck may finally be entitled to a hefty insurance payout from the high-profile NotPetya cyberattack—if an appeals court ruling stands. A New Jersey appellate court on Monday ruled that a group of insurers can’t use war as an argument to deny Merck coverage from the notorious cyberattack that afflicted the company and others…
PENNCREST School District dealing with ransomware attack
A May 1 announcement by PENNCREST School District in Pennsylvania begins: Over the weekend, the PENNCREST School District became aware of a situation, believed to be a ransomware event, which has disrupted certain aspects of our operations. We quickly took steps to implement our Cybersecurity Incident Response Plan. Following our plan, we shut down and…
Suffolk, without a cyberattack recovery plan, hires chief to create one
Vera Chinese reports: Suffolk County’s new chief security information officer, announced Monday by County Executive Steve Bellone, will be charged with creating a recovery plan for potential cyberattacks in the future, administration officials said. The lack of a stand-alone recovery plan before a breach was discovered Sept. 8 likely contributed to the amount of time it has taken…
T-Mobile discloses second data breach since the start of 2023
Sergiu Gatlan reports: T-Mobile disclosed the second data breach of 2023 after discovering that attackers had access to the personal information of hundreds of customers for more than a month, starting late February 2023. Compared to previous data breaches reported by T-Mobile, the latest of which impacted 37 million people, this incident affected only 836 customers….