Tag Archive for: Affected

More than 42,000 affected by ransomware attack on pro bono California law firm


More than 42,000 people had their information exposed during a ransomware attack on a California law firm that provides free services to those in need.

The Law Foundation of Silicon Valley notified regulators in California and Maine this week that the February ransomware attack on their offices resulted in the leak of Social Security numbers and other personal information.

The breach affected both clients and staff members. The law firm said it has about 90 attorneys, social workers, staff, and volunteers while helping about 10,000 people each year.

The firm, which has existed for nearly 50 years, posted a message on its website last week about the incident, confirming that they were the “victim of a sophisticated ransomware attack.”

“While operations were back up and running when offices reopened from the [Presidents Day] holiday weekend, data on one server was later discovered to have been compromised. The Law Foundation immediately engaged cybersecurity specialists who conducted an extensive forensic investigation,” they said.

“The investigation revealed that certain information within the Law Foundation’s system was unlawfully accessed and that the breach compromised the personal information of more than 40,000 clients, staff, and others.”

Information accessed includes: Social Security numbers, medical records, immigration numbers, financial data, driver’s license numbers, financial account/payment card information, passport/government identification, taxpayer-identification numbers, dates of birth and digital signatures.

The investigation into the incident ended on June 1 and the law firm spent another 30 days looking for addresses and contact information for victims, who are now being offered 12 months of identity protection services and identity theft insurance.

The victims involved included both adults and minors.

“We are in the business of helping people with important and sensitive life issues. The breach impacts the core of our nonprofit mission to help low-income individuals and families with serious issues to improve their lives. We have partnered with experienced vendors to notify and assist those who are impacted,” said Alison Brunner, CEO of…

Source…

Kirkland & Ellis, K&L Gates, Proskauer Rose Affected in Wide-Ranging Data Hack


The data of three Am Law 50 firms was accessed in a global data theft operation, according to the ransomware group claiming responsibility for the attack that has compromised the data of millions of individuals.

Kirkland & Ellis, K&L Gates and Proskauer Rose are among the latest organizations to be identified in the breach, finding themselves in the company of a growing list of more than 50 other global corporations and banks targeted by the ransomware group known as CL0P.

Source…

181,000+ patients affected after hackers breach Pennsylvania cardiology group


A Scranton, Pa.-based cardiology group’s computer network was invaded by hackers, who potentially obtained private data of 181,764 patients, The Times-Tribune reported June 12.

Commonwealth Health Physician Network-Cardiology, also known as Great Valley Cardiology, was hacked on Feb. 2, but the breach was not discovered until April 13, the system said. The health system did not announce the breach for two months in order to conduct a forensic investigation to identify everyone affected.

Information obtained varied by person, but included names, addresses, demographic information, Social Security numbers, driver’s license and passport numbers, and credit card or debit card and bank accounts, as well as health insurance, claims and medical information.

Annmarie Poslock, a Commonwealth Health spokesperson, told the news outlet that there was no indication the hackers used the information “in any way.” 

The system learned of the incident from the Department of Homeland Security, which tracks potential cyber threats. The cardiology group disconnected its network and referred the matter to law enforcement. 

“The unauthorized parties no longer have access to the GVC (Great Valley Cardiology) network,” Ms. Poslock said. She added that the hackers used a specialized software to generate passwords until it found the right one.

Affected clients were mailed notices, and a notice about the breach was posted on the website. The system is offering affected people free access to Experian IdentityWorks SM for 24 months to provide ID restoration and credit monitoring services.

Source…

Dozens of NH restaurants affected by nationwide ransomware attack


Dozens of establishments across New Hampshire have been impacted by a nationwide ransomware attack.Restaurant owners said this isn’t affecting the dining experience, but it is causing some problems with gift cards.This time of year is one of The Beach Plums’ busiest with a gift card special right before Mother’s Day.But none of the restaurant’s locations have been able to issue new gift cards for almost two weeks, due to a nationwide ransomware attack on NCR, a supplier for many restaurant point-of-sale systems.“It’s something totally out of our control; that’s what makes it so frustrating,” Robert Lee, owner of The Beach Plum Restaurant, said. “We hope to be able to issue those starting in a few days, but NCR’s been pretty uncommunicative.””The majority of our regulars are completely understanding,” Tom Boucher, CEO and owner of Great New Hampshire Restaurants, said. ”I’m more concerned about the people who want to try us for the first time and they feel like we’re not living up to our end of the deal.”Tom Boucher said all of his restaurants are also having problems with gift cards, loyalty points and payroll for his 900 employees. “I hope people have patience and understand that this is not any restaurant in New Hampshire’s issue — it’s clearly an NCR issue,” Boucher said. In a statement to News 9, NCR said it’s working to both restore applications and enhance its security. “While in-restaurant purchases and transactions continue to operate, affected customers have reduced capabilities on specific Aloha cloud-based and Counterpoint functionality that has impacted their ability to manage restaurant administrative functions. NCR is conducting concurrent efforts to establish alternative functionality for customers, fully restore impacted data and applications, and to enhance its cyber security protections,” NCR said in a statement. Restaurant owners are feeling frustrated with what seems like roadblock after roadblock. “We had two and a half years of the pandemic, we had a year of inflation and trying to find employees and here we are finally getting back to normal and bang, we get hit with this,” Boucher said. “But you know what, we persevere, we…

Source…