ES: Secondary education center hit by Stormous After several months out of the public eye, the pro-Russian Stormous Ransomware group reappeared in February. Now they have claimed an attack on a secondary education center, the Instituto De Educación Secundaria Ies Emilio Canalejo Olmeda (IESCO) in Cordoba, Spain. On March 30, Stormous listed the entity in…
Guam Memorial Hospital under review for potential HIPAA breach
Matsuki Hirayama reports: The unauthorized access into Guam Memorial Hospital’s network is undergoing a detailed review for a possible Health Insurance Portability and Accountability Act or HIPAA breach. The information came to light during the public hospital’s monthly board meeting Wednesday. GMH legal counsel Jeremiah Luther maintains that no patient or employee records were compromised, saying they got lucky….
US commits $25 million to Costa Rica for Conti ransomware recovery
Jonathan Greig reports: The U.S. government is sending $25 million to the government of Costa Rica to help the country recover from a devastating ransomware attack last year that crippled several key agencies. In May 2022, Costa Rica’s newly elected president Rodrigo Chaves declared a state of emergency after the now-defunct Conti ransomware group severely damaged the Ministry of…
3CX knew its app was flagged as malicious, but took no action for 7 days
Dan Goodin reports: The support team for 3CX, the VoIP/PBX software provider with more than 600,000 customers and 12 million daily users, was aware its desktop app was being flagged as malware, but decided to take no action for a week when it learned it was on the receiving end of a massive supply chain attack,…
Tracking the Adelanto Healthcare Ventures breach on DataBreaches.net
Yesterday, DataBreaches reported that a vendor’s breach discovered in November 2021 was first being disclosed by a number of hospitals. Rather than do separate posts as each additional hospital becomes known, you can bookmark that post, where you can scroll down and find updates as DataBreaches becomes aware of them. At the present time, we…
Nine months after ransomware attack, Atlantic Dialysis Management Services notifies patients and regulators
In August 2022, DataBreaches reported a ransomware attack on Atlantic Dialysis Management Services (ADMS) by Snatch Team. DataBreaches first learned of the breach in June 2022, when Snatch Team named ADMS on their leak site. Between then and August 16, when DataBreaches reported on the incident, ADMS ignored requests from this site for information about…