Well, they know something happened, but they haven’t completed their identification of whom they need to notify yet, it seems. From a notice on Premier Health Partners‘ web site: Premier Health Partners (“Premier Health”) is providing notice of an incident that may impact the privacy of personal information for certain patients and clients of the…
Argentina exposes COVID-19 health data in error
Tim Sandle reports: Argentina’s health officials have apparently exposed personal medical data relating to some 115,000 COVID-19 quarantine exemption applicants, in what represents a major health sector data breach. […] An Elasticsearch database containing personal information of more than 115,000 Argentinians who applied for COVID-19 circulation permits was exposed on the web without a password…
Ransomware Threatens Production of 300 Ventilators Per Day
Felipe Erazo: The FDA-approved Coronavirus ventilator manufacturer Boyce Technologies has been targeted by ransomware launched by the DoppelPaymer gang, who are threatening to leak data from the company. Cointelegraph has viewed the DoppelPaymer blog, where the gang lists example files of the data stolen during the attack, including sales and purchase orders, assignment forms, among…
Hacking medical devices to hijack secure facilities
Fahmida Y. Rashid reports: People entering secure facilities—such as those found in military, security, and government agencies—are often asked to hand over their connected devices such as fitness trackers and smartphones. Those devices are stored in secure lockers and then returned when their owners leave the facility. All this is done in the name of…
Due to HHS intervention, an FTP leak in 2018 is finally reported to patients
It looks like HHS followed up on a leak first reported by DataBreaches.net in May, 2018. At the time, this site noted that two MedEvolve clients had exposed data. One of them was Beverly Held, M.D. A researcher had found .dat files exposed without any login required and estimated that there were approximately 12,000 SSNs…
Hancock County school district hit by cyber attack, internet connectivity affected
Matt McKinney reports: Schools in the Community School Corporation of Southern Hancock County district were subject to a cyber attack over the last two days, primarily affecting internet connectivity for teachers and students. No personal information for students, families or staff was compromised, as officials believe it was a targeted attack focused on taking down…