David J. Neal reports on the sentencing of Jonathan Eubanks: A former Davie resident got seven years in federal prison for bedeviling Navarro Security Group with computer attacks after he resigned from the company. Attacks such as rerouting visitors to the company website to another security firms site. Or, deleting all the files on a company…
Category: U.S.
Medical billing firm exposes unencrypted protected health information
Last month, DataBreaches.net was contacted by Kromtech Security’s research team and asked to assist it in alerting a medical billing firm that they were exposing patients’ personal and protected health information on their backup server. On June 12, DataBreaches.net sent iMax Medical Billing in Ohio a message and left them a voice mail, alerting them…
Former Dentons associate accused in extortion plot involving threat to leak documents to legal blog
Debra Cassens Weiss reports: A former Dentons litigation associate in Los Angeles has been charged with extortion for allegedly threatening to leak sensitive law firm documents to the blog Above the Law unless his demands were met. Former associate Michael Potere, 32, is accused of demanding that the law firm pay him $210,000 and give…
So many notifications due to ransomware, but are these really necessary?
Another entity has recently notified patients whose protected health information was on a server infected with ransomware. Once again, even though investigation turned up no evidence that any patient’s PHI was actually accessed or exfiltrated, entities are notifying – on the side of caution and/or because HHS requires them to in the absence of firm…
Cove Family & Sports Medicine recovers from ransomware, but loses some data
There are different metrics for describing the impact of a breach, but one of the ones I use in my subjective system is whether patient data that might be needed for care have been lost, stolen, or corrupted. In June, there were a lot of data breaches or security incidents and many involved ransomware. One…
Trump Hotels notifies some guests of payment card breach that began in 2016
Trump Hotels is sending out data breach notification letters to hotel guests after a service provider notified them of a breach that began in August 2016 but was only detected this year. In their letter, they explain: We are writing to you because of an incident involving unauthorized access to guest information associated with your…