Data Breach News, Healthcare, Malware Ransomware
April 29, 2024
1212 views 24 secs 0

United Healthcare, Optum, and Change Healthcare Involved in Northeast Ohio Neighborhood Health Data Breach

United Healthcare, Optum, And Change Healthcare Involved In Northeast Ohio Neighborhood Health Data Breach

Marco A. De Felice reports: Another significant data breach looms for United Healthcare (UHC), involving patient documents belonging to its Optum financial assistance program and its subsidiary Change Healthcare. In recent hours, the ransomware group Medusa has claimed on its website, within Tor networks, the cyberattack on the servers of Northeast Ohio Neighborhood Health (NEON), a company providing healthcare services headquartered in Cleveland, […]

Data Breach News, Healthcare, News
April 26, 2024
1335 views 52 secs 0

Kaiser Permanente discloses breach that may have impacted 13.4 million patients

Healthcare giant Kaiser Permanente has joined the ranks of those who have disclosed that their websites may have improperly shared protected health information with others. The issue with tracking pixels was first highlighted in investigative reporting by The Markup last year. They have continued to report on the issues, including fines paid, litigation, and Federal […]

Data Breach News, News
April 23, 2024
1112 views 4 mins 0

UnitedHealth says ‘substantial proportion of people in America’ affected by Change Healthcare ransomware attack

Hackers exploited remote access that had no multifactor authentication UHG states it paid ransom to protect patient data UnitedHealth Group (UHG) issued a statement yesterday, claiming they were announcing support for people who might be concerned about their personal data being affected by the massive Change Healthcare data breach. Their statement says, in part: Based […]

Data Breach News, News
April 17, 2024
1135 views 3 mins 0

Congress starts investigating the Change Healthcare cyberattack; Threat actors claim to put data up for sale

The House Energy & Commerce Health Subcommittee held a hearing yesterday, “Examining Health Sector Cybersecurity in the Wake of the Change Healthcare Attack.” It reportedly did not go well for Change Healthcare and UnitedHealth Group, who were not invited to testify and who did not send any representatives to the hearing. The committee was previously […]

Data Breach News, Legal News, News
April 15, 2024
642 views 3 mins 0

MGM Resorts Sues the Federal Trade Commission to Limit Investigation into 2023 Data Breach

Federal Trade Commission building, Washington D.C.

Although the Federal Trade Commission (FTC) has the authority to investigate data breaches, some entities they have investigated have pushed back against the regulator. In 2013, FTC filed a complaint against LabMD for allegedly failing to protect consumer’s data. When the government found for itself in a proceeding by an administrative law judge, LabMD sued […]

Vulnerabilities, Data Breach News, New Threats, News
April 13, 2024
1394 views 50 secs 0

Sisense breach and Palo Alto Networks vulnerability made for a busy week for CISOs

Sisense Security Week reports: The US government cybersecurity agency CISA on Thursday issued a red-alert for what appears to be a massive supply chain breach at Sisense, a New York company that sells big-data analytics tools to businesses. In a cryptic note, CISA warned of a recent “compromise of Sisense customer data” that was discovered […]

Data Breach News, News
April 12, 2024
1165 views 58 secs 0

Small practices vulnerable after Change Healthcare cyberattack; some considering bankruptcy

While Change Healthcare UnitedHealth Group claims it continues to make progress in mitigating the impact to consumers and care providers of a massive cyberattack in February on its system and services, Radiology Business provides a grimmer picture of the impact and recent situation: The incident first occurred in February, shutting down the nation’s largest clearinghouse […]

Data Breach News
April 12, 2024
684 views 12 secs 0

576,000 Roku user accounts hacked in second credential stuffing incident in two months

Roku sign in front of its headquarters.

Streaming giant Roku has disclosed that it experienced a second data security breach in as many months. This time, about 576,000 user accounts were compromised by a second credential stuffing attack. In credential stuffing, threat actors test username/password combinations from other incidents, knowing that some consumers re-use the same login across sites and that some […]

Data Breach News, News
April 11, 2024
1344 views 4 mins 0

AT&T files breach notification, notifies 51 million customers

Remember all the headlines about AT&T customer data of more than 70 million people showing up on the internet again after a previous leak? Now AT&T has filed a notice with the Maine Attorney General’s Office about the incident. Here are two things to note about their notification to Maine: AT&T filed the notification The […]