Mary Carolan reports: All of the HSE’s data “is potentially compromised” following a massive cyberattack, its chief executive, Paul Reid, has told the High Court. […] …. the HSE applied for orders, granted by Mr Justice Kevin Cross, restraining persons unknown, and any persons with knowledge of the orders, from sharing, selling, publishing, processing or…
Hackers Offer Decrypt Key to Irish Health Service With a Catch
Ryan Gallagher and Peter Flanagan of Bloomberg report: A day after threatening to publicly release patient data, the hackers who targeted Ireland’s health service offered a decryption key that they said could be used to unlock computers infected with ransomware. While seeming to offer an olive branch — sharing a link to download the decryption…
Update: Rehoboth Mckinley Christian Health Care Services notified 209,000 patients of February ransomware incident
On February 16, DataBreaches.net reported that Conti threat acctors had apparently attacked Rehoboth Mckinley Christian Health Care Services, Inc (RMCHCS) in New Mexico. As it has done in similar attacks, the threat actors dumped a small sample of files as proof. The files include copies of handwritten injury reports and other reports related to named individuals’…
Update: Nocona General Hospital “recently” learned of a breach we reported in early February
On February 4, DataBreaches.net reached out to Nocona General Hospital (NGH) in Texas about an attack claimed by Conti threat actors the previous day. The hospital did not respond. On February 7, this site emailed NGH, writing, in part, “I see that Conti threat actors have dumped files that they claimed they copied and stole…
Data of 100+ million Android users exposed via misconfigured cloud services
Ionut Ilascu reports: Security researchers discovered that personal data of more than 100 million Android users has been exposed due to various misconfigurations of cloud services. The data was found in unprotected real-time databases used by 23 apps with download counts ranging from 10,000 to 10 million and also includes internal developer resources. Read more…
Look how many cybercriminals love Cobalt Strike
From Intel471: Since its release in 2012, Cobalt Strike has been one of the most popular tools for penetration testers to use when simulating how known threat actor tools will look when targeting an organization’s network. However, there is a downside to that popularity: the criminals love it, too. And if they are using it,…