Bleeping Computer reports that hospitals are being warned about a social engineering trick used by hackers to gain access: The sector alert issued by the Health Sector Cybersecurity Coordination Center (HC3) this week says these tactics have allowed attackers to gain access to targeted organizations’ systems by enrolling their own multi-factor authentication (MFA) devices. In […]
Updated April 4: Omni Hotels subsequently acknowledged that they were hit by a cyberattack. They have published an FAQ on the incident that says most services have been restored. They have not yet determined whether any guest data on their servers was accessed or acquired in the attack. Original article follows: Omni Hotels & Resorts […]
Victim Falsely Prosecuted and Spent Nearly Two Years in Jail and Mental Hospital A former Iowa hospital administrator who lived under a false identity for more than 30 years and caused the false imprisonment of his victim pled guilty today in federal court in Cedar Rapids, Iowa. Matthew David Keirans, age 58, from Hartland, Wisconsin, […]
“It’s not a matter of ‘if.’ It’s just a matter of ‘when,’” people say about data breaches. The same could be said for potential class action lawsuits that follow announcements of big breaches. This week, AT&T is among those who are being sued over a big breach. Bloomberg reports: COURT: N.D. TexTRACK DOCKET: No. 3:24-cv-00757 (Bloomberg Law subscription) AT&T […]
CNN had an exclusive report that is generating a lot of coverage. It begins: Within hours of opposition leader Alexey Navalny’s death in February in a Russian prison, a group of anti-Kremlin hackers went looking for revenge. Using their access to a computer network tied to Russia’s prison system, the hackers plastered a photo of Navalny on the […]
WFAA reports that AT&T has begun notifying about 7.6 million current AT&T account holders and 65.4 million former account holders whose data recently leaked online. The data set includes information such as Social Security numbers. It is unknown if the data “originated from AT&T or one of its vendors,” the company said in a recent […]
A draft of federal cyber incident reporting rules for the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) has been posted in the Federal Register. It’s not exactly light reading, weighing in at a whopping 447-page Notice of Proposed Rulemaking. The rules will require critical infrastructure entities to notify the federal government of […]
On February 15, the U.S. Department of State offered a $10 million reward for “information leading to the identification or location of any individual(s) who hold a key leadership position in the Transnational Organized Crime group behind the ALPHV/Blackcat ransomware variant. In addition, a reward offer of up to $5,000,000 is offered for information leading to the […]
The Readable explains: A decade-long legal battle involving a data breach that affected the majority of the South Korean population concluded last week. The court confirmed a compensation award of $48 million to a credit card company. The Supreme Court of Korea has rejected the appeal of the defense and ordered the company to pay […]
Data Breach Today reports: A Midwest operator of nursing homes has filed for bankruptcy, citing the effects of a ransomware attack last fall and fallout from the recent Change Healthcare outage as factors that contributed to its financial woes. See Also: Take Inventory of Your Medical Device Security Risks SC Healthcare Holdings LLC, which operates as […]
