Taylor Campbell reports: Hundreds of thousands of patients, including many in Windsor-Essex, whose personal information was posted to the dark web following a cyberattack last fall will soon receive letters from impacted hospitals. “One patient is clearly too many,” said Windsor Regional Hospital CEO David Musyj. He called criminal cyberattacks “disgusting acts, particularly when aimed…
Au: Diabetes WA reveals data breach
Richard Chirgwin reports: Diabetes WA has disclosed a data breach affecting people who engaged with its telehealth service. In a breach notice posted Tuesday, the organisation said a “third party” gained “access to the personal information of some … contacts.” The personal information possibly exposed in the breach includes name, address, date of birth, email, phone number,…
City of Hope updates a breach disclosure, reports 827,149 patients affected in ransomware attack last year
City of Hope updated its breach disclosure. DataBreaches can now reveal some previously undisclosed details about the 2023 incident. In December 2023, City of Hope, a cancer treatment center in Duarte, California, notified HHS that it had experienced a breach. Its report indicated that “501” patients had been affected, but this was just a marker…
Indiana-based Otolaryngology Associates, LLC notifies 316,802 patients about February cyberattack
Otolaryngology Associates, LLC (OA) has 13 locations throughout Indiana in Indianapolis, Greencastle, Greenfield, Kokomo, Noblesville, and Carmel. On April 1, the ENT (ears, nose, throat) practice notified the U.S. Department of Health and Human Services of a data breach that affected 316,802 patients. According to a notice on its website, OA became aware of the…
No need to hack when it’s leaking, Wednesday edition: Eyecare Services Partners exposed more than 2 million patients’ SSN – researcher
EyeCare Services Partners (ESP) is a private company with a network of ophthalmologic, optometric and ambulatory surgery centers. It is headquartered in Dallas, Texas. On February 9, an IT student who was searching the internet for exposed datasets noticed that ESP had an unsecured blob listed on GrayhatWarfare. Due to other work, “JLT” (as he…
Cybercriminals Abused Remote Desktop Protocol (RDP) in 90% of Attacks Handled by Sophos Incident Response in 2023
Some more analysis of 2023 breaches. Sophos reports that for more than 150 incident response (IR) cases it handled in 2023, cybercriminals abused remote desktop protocol (RDP) in 90% of attacks. This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020. In addition,…