-
Data Security Incident at Health Benefits Vendor Brightline Affects Stanford Community
Stanford University has issued a notice to inform its community about a recent data security incident experienced by health benefits vendor Brightline. Brightline, a provider of virtual behavioral and mental health services, experienced a data breach that impacted portions of the Stanford community, specifically those covered by Stanford’s group health plans. These plans include Stanford…
-
Kodi User Forum Rebuilds Following Data Breach Impacting 400,000 Members
Open source home theater software developer Kodi is working to rebuild its user forum following a significant data breach in February 2023. The incident came to light after a threat actor advertised a database dump of Kodi’s MyBB user forum software on underground forums. The breach compromised the data of approximately 400,000 Kodi users, including…
-
Cyber Attack Impacts Iowa Medicaid Members in National Data Breach
The Iowa Department of Health and Human Services (HHS) has announced that the personal information of some Iowa Medicaid members was compromised in a national data breach affecting a contractor’s computer system last year. The breach did not directly target the Iowa Medicaid system. Elizabeth Matney, Iowa Medicaid Director, stated, “We regret the inconvenience and…
-
Florida Sheriff’s Office Suffers Data Leak due to Lockbit Ransomware Attack
Washington County, Florida – The Washington County Sheriff’s Office has confirmed that it has suffered a ransomware attack by the notorious Lockbit group. The attack resulted in the encryption of the Sheriff’s Office’s computer systems and the unauthorized release of sensitive information. According to a statement from the Sheriff’s Office, the attack involved the encryption…
-
OpenAI’s ChatGPT suffers security breach through open-source library bug
OpenAI, the organization behind the popular chatbot ChatGPT, has confirmed a data breach that exposed users’ personal information. The breach was caused by a bug in an open-source library called Redis-py, introduced by OpenAI on March 20. As a consequence, users were able to access chat data that did not belong to them, and sensitive…
-
Latitude Financial Services Faces Class Action Lawsuit Over Massive Data Breach
Latitude Financial Services is facing the possibility of a class action lawsuit following the revelation that personal information of 14 million customers has been exposed in a data breach. The breach, which took place over several years, included customer names, addresses, phone numbers, and dates of birth, along with 7.9 million Australian and New Zealand…
-
Law Firm Fined $200K for Data Breach Caused by Cybersecurity Lapses
The Heidell, Pittoni, Murphy & Bach law firm has agreed to pay $200,000 to the state of New York over data security lapses that led to a data breach in 2021. The breach exposed the private data of nearly 115,000 hospital patients, including over 61,000 New Yorkers, due to the firm’s failure to comply with…
-
Sun Pharma Reports Security Incident, Ransomware Group Claims Massive Data Breach
Sun Pharmaceutical, one of India’s largest drug makers, reported an information security incident on March 2nd, 2023, which impacted some of its IT assets. The company has taken appropriate containment and remediation actions to address the incident and stated that it did not impact its core systems and operations. However, the threat actor group ALPHV…
-
Protecting Sensitive Patient Information: Cybersecurity in Health Care
The healthcare industry faces unique cybersecurity challenges due to the sensitive nature of patient data. Health providers maintain troves of sensitive health information and personal details, making them a prime target for cybercriminals seeking to steal data or sabotage systems. At the same time, they often have limited resources to invest heavily in cybersecurity, as…