June 16 – #TimisoaraHackerTeam Analysis TLP: Clear
Search Results for: HCA
Another hospital hit by ransomware: Columbus Regional Healthcare System in North Carolina hit by Daixin
Columbus Regional Healthcare System (CRHS) is a non-profit organization in North Carolina licensed for 154 beds. The Daixin ransomware group claims that on May 18, they encrypted the hospital’s servers after exfiltrating data and deleting backups. A Ransom Demand and Failed Negotiations A spokesperson for Daixin tells DataBreaches that three days after they encrypted the…
Data on as many as 100,000 Nova Scotia healthcare staff stolen in MOVEit breach
As most people know by now, there are a LOT of victims from Clop’s attack on Progress MoveIT. So many, in fact, that they posted an announcement to all victims, giving the victims until June 14 to contact Clop to negotiate payment to delete data. The Boots pharmacy chain in the U.K. was affected, but…
Norton Healthcare didn’t call it a ransomware attack. Then BlackCat claimed responsibility for it.
On May 20, DataBreaches reported that Norton Healthcare in Kentucky and Indiana had disclosed what sounded like a ransomware incident that they discovered on May 9, but they never called it a ransomware incident, even though they stated that they had received faxed threats and demands. Today, AlphV (BlackCat) claimed responsibility for the attack and…
Apria Healthcare notifies 1.2 million patients of hacking incidents in 2019 and 2021
HIPAA requires that covered entities notify HHS and affected patients of a reportable breach within 60 calendar days of discovery of a breach. Exceptions are made if law enforcement asks an entity to delay notification so as not to interfere with an investigation, but such requests are infrequent. So why are we first finding out…
Norton Healthcare update on cyberattack
Norton Healthcare has six hospitals in Kentucky and one in Indiana. Since May 9, they have been working on recovering from a cyberattack. They don’t call it a ransomware attack but if they received faxed threats and demands as they state in their update, it was likely either a ransomware attack or someone skipped the…