Schneier on Security

NOVEMBER 25, 2020

In a lecture, Adam Shostack makes the case for a discipline of cyber public health. It would relate to cybersecurity in a similar way that public health relates to medicine.

Cybersecurity 212

Cybersecurity 212

Schneier on Security

SEPTEMBER 21, 2021

Apparently, a nation-state hacked Alaska’s Department of Health and Social Services. Not sure why Alaska’s Department of Health and Social Services is of any interest to a nation-state, but that’s probably just my failure of imagination.

Hacking 252

Hacking Healthcare 252

Security Affairs

MARCH 27, 2024

The INC Ransom extortion group hacked the National Health Service (NHS) of Scotland and is threatening to leak three terabytes of alleged stolen data. The INC Ransom extortion gang added the National Health Service (NHS) of Scotland to the list of victims on its Tor leak site. “3 terabytes of data will be published soon.

Healthcare 105

Healthcare Government Hacking Cybercrime 105

Security Affairs

JANUARY 9, 2024

The LockBit ransomware gang claimed responsibility for the cyber attack on the Capital Health hospital network. The LockBit ransomware operation has claimed responsibility for the cyberattack that hit the Capital Health hospital network in November 2023. Capital Health Regional Medical Center is a member of Capital Health System.

Ransomware 107

Ransomware Healthcare Encryption Cyber Attacks 107

Bleeping Computer

JANUARY 25, 2024

Genetic testing provider 23andMe confirmed that hackers stole health reports and raw genotype data of customers affected by a credential stuffing attack that went unnoticed for five months, from April 29 to September 27. [.]

Data breaches 140

Data breaches 140

Bleeping Computer

APRIL 9, 2024

Non-profit healthcare service provider Group Health Cooperative of South Central Wisconsin (GHC-SCW) has disclosed that a ransomware gang breached its network in January and stole documents containing the personal and medical information of over 500,000 individuals. [.]

Ransomware 102

Ransomware Healthcare 102

Security Affairs

NOVEMBER 28, 2023

The US Healthcare provider Ardent Health Services disclosed that it was the victim of a ransomware attack last week. Ardent Health Services is a healthcare company that operates hospitals and other medical facilities in the United States. It is a for-profit health system with a focus on acquiring, managing, and improving hospitals.

Healthcare 102

Healthcare Ransomware Technology Internet 102

Malwarebytes

APRIL 18, 2024

The Federal Trade Commission (FTC) has reached a settlement with online mental health services company Cerebral after the company was charged with failing to secure and protect sensitive health data. The number of breaches concerning health information is shocking.

Data breaches 110

Data breaches Passwords Phishing Password Management 110

Security Boulevard

APRIL 30, 2024

The post Why Hackers May Already Have Your Private Health Care Information appeared first on Security Boulevard. There’s probably no place on earth where we’re more vulnerable than a doctor’s office or.

Healthcare 70

Healthcare 70

Security Boulevard

FEBRUARY 14, 2023

GDPR ASAP: Data brokers are selling PII about mental health conditions—depression, anxiety, bipolar disorder, PTSD, OCD, etc. The post Your Mental Health Data for Sale or Rent — 20¢ appeared first on Security Boulevard.

Social Engineering 135

Social Engineering Insurance Accountability Healthcare 135

The Hacker News

APRIL 16, 2024

It has also been fined more than $7 million over charges that it revealed users' sensitive personal health information and other data to third parties for advertising purposes and failed to honor its easy cancellation policies. Cerebral and

Advertising 100

Advertising 100

Bleeping Computer

DECEMBER 26, 2023

Integris Health patients in Oklahoma are receiving blackmail emails stating that their data was stolen in a cyberattack on the healthcare network, and if they did not pay an extortion demand, the data would be sold to other threat actors. [.]

Healthcare 113

Healthcare 113

Security Boulevard

JULY 21, 2023

This is a quick tutorial on how to get started with Repository Health Check (RHC) 2.0, The post How to use Repository Health Check 2.0 available in Sonatype Nexus Repository Manager 3.3. appeared first on Security Boulevard.

98

98

Bleeping Computer

FEBRUARY 13, 2024

Integris Health has reported to U.S. authorities that the data breach it suffered last November exposed personal information belonging to almost 2.4 million people. [.]

Data breaches 96

Data breaches Healthcare 96

Digital Shadows

APRIL 4, 2024

In April 2024, ReliaQuest probes a campaign targeting health care for banking info. Findings reveal a series of attacks on clients in the sector.

Social Engineering 57

Social Engineering Engineering Banking 57

Security Affairs

NOVEMBER 10, 2023

McLaren Health Care (McLaren) experienced a data breach that compromised the sensitive personal information of approximately 2.2 McLaren Health Care (McLaren) disclosed a data breach that occurred between late July and August. McLaren Health Care is a nonprofit health care organization based in Grand Blanc, Michigan, USA.

Data breaches 112

Data breaches Identity Theft Insurance Ransomware 112

Security Boulevard

JUNE 19, 2023

Two months after noticing suspicious activity in its systems, PharMerica disclosed that nearly six million patients had their health care data stolen by threat actors. The post PharMerica Breach: The Lure of Health Care Data appeared first on Security Boulevard. filed a data breach notification in May 2023.

Data breaches 120

Data breaches Healthcare Risk Government 120

The Last Watchdog

AUGUST 1, 2023

1, 2023 – Devo Technology , the cloud-native security analytics company, today announced its financial support for Cybermindz, a not-for-profit organization dedicated to improving the mental health and well-being of cybersecurity professionals. Cybermindz offers a pilot mental health program available for early adopters. About Devo.

Cybersecurity 189

Cybersecurity Threat Detection Technology Media 189

Security Boulevard

OCTOBER 25, 2022

Show notes for series 2, episode 6 Mental health is an important but often misunderstood area, full of prejudice and technical jargon. The post Cyber Security DE:CODED – Mental health challenges appeared first on SE Labs Blog. The post Cyber Security DE:CODED – Mental health challenges appeared first on Security Boulevard.

Small Business 104

Small Business Cybersecurity 104

Heimadal Security

OCTOBER 19, 2022

Pennsylvania-based company Keystone Health discovered a data breach in August that potentially impacted the protected health information (PHI) of over 235,000 individuals. The post Keystone Health Confirms Data Breach appeared first on Heimdal Security Blog. Explaining the Incident […].

Data breaches 104

Data breaches Cybersecurity 104

Bleeping Computer

MAY 3, 2021

Nonprofit health care provider Scripps Health in San Diego is currently dealing with a ransomware attack that forced the organization to suspend user access to its online portal and switch to alternative methods for patient care operations. [.].

Ransomware 128

Ransomware 128

TrustArc

JULY 14, 2023

TrustArc’s privacy experts review the implications of new personal information privacy rules in the Washington My Health My Data Act, and how its private right of action could trigger waves of litigation. The post Washington My Health My Data Act: Implications appeared first on TrustArc Privacy Blog.

96

96

Bleeping Computer

NOVEMBER 10, 2023

McLaren Health Care (McLaren) is notifying nearly 2.2 million people of a data breach that occurred between late July and August this year, exposing sensitive personal information. [.]

Data breaches 111

Data breaches Healthcare 111

Security Affairs

OCTOBER 1, 2023

The ALPHV/BlackCat ransomware gang added McLaren Health Care to the list of victims on its Tor leak site. McLaren Health Care is a not-for-profit healthcare system based in Michigan, United States. The ALPHV/BlackCat ransomware gang added McLaren Health Care to the list of victims on its Tor leak site.

Healthcare 112

Healthcare Ransomware Manufacturing Hacking 112

Security Boulevard

JUNE 16, 2021

A sharp rise in ransomware is buffeting the health care sector and forcing IT security professionals to reevaluate how they tackle the threat. More than a third of health care organizations were hit by ransomware in the last year, according to a Sophos survey of 328 representatives from the health care sector. Of those hit.

Ransomware 127

Ransomware Risk Government Cybersecurity 127

Security Affairs

DECEMBER 27, 2023

St Vincent’s Health Australia, the largest Australian healthcare provider, suffered a data breach after a cyber attack. St Vincent’s Health Australia is the largest non-profit healthcare provider in the country, The healthcare system was hit by a cyberattack that resulted in a data breach.

Healthcare 106

Healthcare Data breaches Government Cyber Attacks 106

TrustArc

JULY 12, 2023

TrustArc’s privacy experts share an overview of the new Washington My Health, My Data Act, including a timeline for compliance with its strict rules on protection of personal information. The post Washington My Health, My Data Act: Background Brief appeared first on TrustArc Privacy Blog.

97

97

Penetration Testing

NOVEMBER 28, 2023

At least six medical institutions belonging to the Ardent Health Services (AHS) network have reported network operation disruptions. ... The post US Hospitals Targeted in Ransomware Attack, Ardent Health Services Confirms appeared first on Penetration Testing.

Penetration Testing 82

Penetration Testing Ransomware Malware 82

Security Boulevard

MAY 5, 2021

A ransomware attack against Scripps Health in San Diego over the weekend underscores the potentially dangerous impact cyberattack incidents can wreak on health care providers.

Ransomware 117

Ransomware Healthcare Risk Government 117

Security Affairs

JULY 5, 2023

The European Union Agency for Cybersecurity (ENISA) releases its first cyber threat landscape report for the health sector. The European Union Agency for Cybersecurity (ENISA) releases today its first cyber threat landscape report for the health sector. Most targeted assets (30%) are patient data, including electronic health records.

Cyber threats 92

Cyber threats Accountability Healthcare Ransomware 92

Security Boulevard

FEBRUARY 2, 2022

The health care sector is no exception, with a dramatic increase in the use of telehealth for the delivery of vital care. The post Cyberinsurance Tips for Health Care appeared first on Security Boulevard. The last 18 months have seen an unprecedented digital transformation in many verticals.

Digital transformation 122

Digital transformation Risk Security Awareness Cybersecurity 122

Malwarebytes

APRIL 23, 2024

In the update, the company revealed the scale of the breach, saying: “Based on initial targeted data sampling to date, the company has found files containing protected health information (PHI) or personally identifiable information (PII), which could cover a substantial proportion of people in America.”

Healthcare 129

Healthcare Identity Theft Passwords Data breaches 129

Bleeping Computer

JANUARY 8, 2024

The Lockbit ransomware operation has claimed responsibility for a November 2023 cyberattack on the Capital Health hospital network and threatens to leak stolen data and negotiation chats by tomorrow. [.]

Ransomware 97

Ransomware Risk Healthcare 97

Security Boulevard

NOVEMBER 23, 2022

Hospitals, government health agencies and other health care entities have a growing need to securely store and transfer personal data, both from patient to provider and with relevant agencies, insurers and regulators. The post How Health Care Data Encryption Fits Into Your Security Strategy appeared first on Security Boulevard.

Encryption 104

Encryption Insurance Government Risk 104

Heimadal Security

JULY 28, 2021

On Tuesday, UC San Diego Health confirmed it had fallen victim to a data breach involving “unauthorized access to some employee email accounts.” The post UC San Diego Health Discloses Data Breach appeared first on Heimdal Security Blog. What Happened?

Data breaches 124

Data breaches Accountability Cybersecurity 124

Bleeping Computer

NOVEMBER 30, 2023

Capital Health hospitals and physician offices across New Jersey are experiencing IT outages after a cyberattack hit the non-profit organization's network earlier this week. [.]

Healthcare 90

Healthcare 90

SC Magazine

JUNE 16, 2021

Stillwater Medical Center was hit with a ransomware attack on June 13 and is currently operating under electronic health record downtime as it attempts to bring its systems back online. The health system operates a number of care sites, specialist offices, hospitals and clinics in Oklahoma. The latest update at 10 a.m.

Ransomware 110

Ransomware Computers and Electronics Media Accountability 110