AFP reports that because the value of BTC had increased dramatically, a ransomware victim wound up getting back a small fortune when they recovered the bitcoin they had paid. The southern Maastricht University in 2019 had paid 200,000 euros ($208,000) in bitcoins to attackers who had encrypted hundreds of Windows servers and backup systems. But the…
Medical documents, other personal information found by landscaper on busy Jacksonville road
Today’s reminder that low-tech paper breaches are still reportable breaches. Robert Bradfield reports someone found a trove of medical records from Allen Eye Center. Some records date back to the 1990s. “I just know that I saw date of births, names, full names, addresses, phone numbers,” Matt said. Read more at First Coast News.
Iranian hackers leak info of over 300,000 Israelis from tourism sites
There’s more emerging about the Sharp Boys’ group attack on Israeli tourism sites. The Jerusalem Post now reports: The personal information of over 300,000 Israelis was leaked last month by an Iranian hacker group targeting Israeli travel booking sites. The group, named Sharp Boys, claimed last month that it had obtained data from Israeli tourism sites,…
CISA Alert (AA22-181A): MedusaLocker
CISA Alert: (AA22-181A) #StopRansomware: MedusaLocker Summary Actions to take today to mitigate cyber threats from ransomware: • Prioritize remediating known exploited vulnerabilities. • Train users to recognize and report phishing attempts. • Enable and enforce multifactor authentication. Note: this joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders…
Professional Finance Company, Inc. is providing breach notifications to patients of 657 covered entities
So this one could be another big one: Professional Finance Company, Inc. (“PFC”), an accounts receivable management company that provides assistance to various organizations (including healthcare providers), announced today that it is notifying individuals whose information may have been involved in a recent network security incident. On February 26, 2022, PFC detected and stopped a sophisticated…
Alameda Health System’s second breach went undetected by investigators of first breach?
On June 24, Alameda Health System in California submitted a notification to the California Attorney General’s Office. The notification concerned a breach of an employee’s email account breach that began on April 30, 2020. The breach wasn’t discovered until February 23, 2022, and the account was locked down after that in March. According to Alameda’s…