The Office of Inadequate Security
Sydney J. Freedberg Jr. reports: AUSA 2024 — Army undersecretary Gabe Camarillo announced here Tuesday that the service would create a secure online enclave where small businesses can work with sensitive information under the Army’s protection — a potential lifeline for smaller firms struggling to meet Pentagon cybersecurity requirements and defend themselves against high-end threats like China. Known as…
Here’s today’s reminder that it’s not just HHS OCR that entities need to be concerned about in terms of enforcement of data security requirements for health data. ASRC Federal Data Solutions LLC (AFDS), headquartered in Reston, Virginia, has agreed to resolve False Claims Act allegations in connection with a government contract related to its storage…
While it’s never good news that another medical entity has fallen prey to a cyberattack, in this day and age, it is somewhat impressive when an entity responds promptly. On October 4, Boston Children’s Health Physicians (BCHP), a medical practice in New York and Connecticut, mailed letters to affected current and former employee, patient, and…
Lawrence Abrams reports: Cisco has confirmed to BleepingComputer that it is investigating recent claims that it suffered a breach after a threat actor began selling allegedly stolen data on a hacking forum. “Cisco is aware of reports that an actor is alleging to have gained access to certain Cisco-related files,” a Cisco spokesperson told BleepingComputer. “We have…
Elaina Athans reports from Apex, North Carolina: People have been coming to Apex Town Hall in droves to challenge their water bills, and Mayor Jacques Gilbert is encouraging residents to do exactly that. Some in the town known as ‘The Peak of Good Living’ are getting bills equivalent to a mortgage payment. More than $1,800 was…
Update of October 24 — We have made excellent progress, I think, but are still investigating some things that were broken. If you spot or experience any problems, please let me know via email to fixitfolks@databreaches[.]net.