In 2019, Filters Fast experienced a data breach when a threat actor exploited a plugin vulnerability in vBulletin. Using SQL injection, the attacker was able to obtain consumers’ cardholder names, billing addresses, expiration dates, validation codes, and primary account numbers for purchases made between June, 2019 and July, 2020. Filters Fast did not detect any…
Wyoming Health Director, Tech Officer Quit After Data Leak
Mead Gruver of AP reports: Wyoming’s health director and chief information officer have resigned after a data leak involving the personal information of tens of thousands of people who were tested for the coronavirus. A state Department of Health employee working with computer code accidentally released COVID-19 test results, as well as blood alcohol test…
Nz: New Zealand health service hit by cyber attack
Zach Marzouk reports: A cyber attack hit part of New Zealand’s health service this week, and now hackers who claim to be behind the attack have made contact with health officials. The attack brought down the Waikato District Health Board’s (DHB) complete IT network on Tuesday which resulted in some appointments being cancelled. Read more on ITPro. The…
Nz: Police admit privacy breach after nearly 40 gun licence applicants copied into same email
Mark Quinlivan reports: Police have admitted nearly 40 firearms licence applicants have had their privacy breached. A police spokesperson told Newshub 38 people had been impacted by the “localised” privacy breach after an email was sent advising the recipients to undertake a firearms safety course. Read more on NewsHub.
Irish patients’ data stolen by hackers shows up in negotiation chat
Laura Noonan in Dublin and James Shotter in Warsaw report: Medical and personal information about Irish patients stolen by hackers last week is now being shared online, screenshots and files seen by the Financial Times show. The records offered online by hackers to further their demands for almost $20m in ransom also include internal health…
Judge lets novel claim stand in UHS patient data breach lawsuit
Brendan Pierson reports: A federal judge has narrowed a lawsuit brought by patients against hospital operator Universal Health Services Inc over a data breach last year, finding that merely having their data exposed did not give patients standing to sue but that one plaintiff could go forward with a claim that he was harmed because…