Tag Archive for: Affected
1 Million Patients Affected by GoAnyWhere MFT Hack
3rd Party Risk Management
,
Governance & Risk Management
,
Healthcare
Community Health Systems Reports Data Breach in SEC Filing
A multistate hospital chain disclosed to federal regulators a cybersecurity incident involving secure file transfer software that compromised the data of about 1 million patients.
See Also: Live Webinar | Navigating the Difficulties of Patching OT
Community Health Systems, which operates nearly 80 hospitals in 16 states, told the U.S. Securities and Exchange Commission that the incident stems from its use of Fortra’s GoAnyWhere software. The Tennessee-based chain says Fortra “recently” notified the company of an incident that resulted in the unauthorized disclosure of patient data.
“As a result of the security breach experienced by Fortra, protected health information and personal Information of certain patients of the company’s affiliates were exposed by Fortra’s attacker,” the filing says.
While the investigation is ongoing, CHS says that so far it does not believe any of its systems were affected and that there has not been any material interruption of the company’s business operations, including the delivery of patient care.
Fortra’s GoAnyWhere managed file transfer software was the subject of a security alert issued by the company on Feb. 1. The Cybersecurity and Infrastructure Security Agency nine days later included the vulnerability in its catalog of known exploited vulnerabilities.
CISA describes the GoAnyWhere flaw as involving a “pre-authentication command injection vulnerability in the License Response…
Cybersecurity expert offers advice for millions affected in Twitter hack
Personal emails linked to 235 million Twitter accounts have been exposed according to Israeli security researcher Alon Gal with the cyber-crime information firm Hudson Rock.
Account passwords weren’t leaked but hackers now have a chance at trying to reset or guess them if they’re commonly used.
I sat down with Jacksonville-based cybersecurity expert Christopher Hamer about the next steps Twitter users should take.
“Change your password. Verify that your authentication email or your two-step authentication is turned on. Don’t choose a stupid password,” said Hamer.
The Cybersecurity and Infrastructure Security Agency recommends choosing a strong password between eight to 64 characters with numbers and symbols.
Having a password with length and complexity makes it difficult for hackers to access your account.
Hamer recommends taking it a step further and organizing your passwords in groups.
“Have a password for websites that don’t have your personal information. Don’t have any sensitive information, don’t have access to your finances that aren’t tied to your credit card. That’s your throwaway password. If it gets compromised oh well,” Hamer said.
Cybersecurity experts expect that this Twitter hack will cause an uptick in targeted phishing emails and doxxing – which publicly reveals someone’s personal information online.
Hamer said this can happen to anyone who uses the internet despite how careful you are online.
“I tell my children and I tell my clients the instant that information leaves your computer and goes on the internet you have zero control over it,” said Hamer.
The Twitter breach appears to have taken place before Elon Musk took over the company. However, the hack could put the social media conglomerate in trouble with the Federal Trade Commission.
Copyright 2023 by WJXT News4JAX – All rights reserved.
QUT hack: Major Australian university Queensland University of Technology dealing with cybersecurity attack, QTAC affected
A major Australian university has become the victim of a cybersecurity attack, affecting major services containing students’ personal information.
The IT department at Queensland University of Technology raised the alarm on Thursday morning.
Several printers began producing suspicious messages in bulk, with students instructed not to interact with the printers until further notice.
Watch the latest news and stream for free on 7plus >>
The messages say the university’s system has been “hit”.
“Most likely what happened was that you decided to save some money on your security,” it reads.
“Alas, as a result, your critical data was not only encrypted but also copied.
“From there it can be published online. Then anyone on the internet from darknet…and even your employees will be able to see your internal documentation.”
The message then demanded money in return for data.
QUT reported a cohort of 53,253 students in 2021, as well as over 4500 staff members.
In a statement, a QUT spokesperson stated the university had “experienced a cybersecurity incident today which purports to be a Royal ransomware attack”.
“As a precaution, QUT IT systems have been taken offline while investigations are completed. At this stage, our assessment is that no student or staff data has been compromised.
“Staff and students have been notified. Students wanting to accept their QTAC offer are being contacted to let them know systems are down. They will be advised when the systems are back online.
“Technical staff are currently investigating and QUT has notified the relevant agencies of the situation.”