Leon Medical Centers (LMC) in Florida has issued a press release about the ransomware attack it experienced, and that DataBreaches.net has reported previously. In our most recent report, we noted that Conti threat actors had dumped protected health information for numerous patients, while claiming that they still had more files from Leon that they would dump….
‘Completely outrageous’: Names of students who use University of Ottawa Students’ Union Food Bank made public
Bridget Coady, Charley Dutil, & Emily Wilson report: The Fulcrum was made aware on Tuesday night that the information of multiple University of Ottawa students who used the University of Ottawa Students’ Union (UOSU) Food Bank was publicly available on the union’s website. A total number of 111 students were listed on the document along…
And yet more ransomware variants…
Pop quiz: Which one of these is not a new ransomware noted recently: Sharp Knot Chinese Take-Out Hidden Tear Babuk Niros Bonsoir Not sure? I can’t keep up with all the variants and new types. But thankfully, there’s BleepingComputer, where I can find a weekly rundown on developments. Read their rundown from this week and…
OCR Releases Report Summarizing HIPAA Privacy and Security Compliance Failures
Joseph J. Lazzarotti and Maya Atrakchi of JacksonLewis write: In the final days of 2020, the Office for Civil Rights (OCR) at the U.S. Health and Human Service (HHS) released a HIPAA Audits Industry Report (“the Report”), that could be quite helpful to covered entities and business associates for tackling HIPAA compliance as we enter the new…
Delaware County officials paid $25,000 in ransom to hackers who infiltrated the county’s computer system
Vinny Vella reports: Hackers used a malware attack to infiltrate Delaware County’s servers in the fall, and then held employees’ personal data for ransom, ultimately costing the county $25,000 in ransom to restore access to the data, according to county officials. The attack was first reported Nov. 24, when county officials said the computer network…
Australian Digital Health Agency sees ‘inconsequential’ My Health Record data breach notices eroding trust
Ry Crozier reports: The Australian Digital Health Agency, overseer of the My Health Record, has expressed concern at the number and type of “potential” data breaches it is being forced to disclose. In a submission to the Privacy Act review [pdf], the agency (ADHA) asks for changes to the My Health Records Act under which…