The Largest Healthcare Breach in History In February 2024, ransomware operators compromised Change Healthcare and exposed the protected health information of approximately 192.7 million people — roughly two-thirds of all healthcare data exposures that year. It remains the largest health data breach in history, surpassing the 2015 Anthem breach that held the record for nine […]
The Attack: Double Extortion via Phishing BL4CK SP1D3R is a ransomware variant that combines file encryption with data theft — the “double extortion” approach that’s become standard among ransomware groups. According to the incident report, it spreads primarily through phishing emails carrying malicious attachments or links to infected pages. Once a victim opens the attachment, […]
North Los Angeles County Regional Center has begun mailing notification letters to individuals affected by a November 2024 ransomware attack. The eight-month gap between the incident and notification tells you everything you need to know about the complexity and cost of recovery. Regional centers serve individuals with developmental disabilities, managing case files, medical records, service […]
An autonomous LLM agent has conducted what researchers believe to be the first fully agentic ransomware attack. The AI system independently planned the campaign, identified vulnerable targets, delivered malicious payloads, and executed file encryption — all without human intervention at any stage. This represents a significant escalation in attacker capability. An AI agent can generate […]
AdaptHealth, a publicly traded provider of home medical equipment and diabetes supplies, just disclosed a material cybersecurity incident involving the theft of patient data. The company hasn’t released full technical details yet, but the pattern is familiar: an attacker gained access to systems containing protected health information and exfiltrated it. What Happens at the File […]
The Attack: Social Engineering Meets Ransomware A ransomware campaign is targeting small businesses across the US, Europe, Middle East, and other regions by masquerading as official Interpol communications. The social engineering is straightforward but effective: threat actors send emails appearing to come from Interpol, likely warning recipients about supposed security issues or legal matters that […]
The Documentation Problem Small Practices Face Small medical practices face a specific challenge with HIPAA compliance: the Security Rule requires continuous audit controls that document who accessed electronic protected health information (ePHI), when they accessed it, what they did with it, and which program they used. For a three-physician practice with a part-time office manager, […]
Huntsville Hospital Health System has reported a data breach affecting patient records, disclosed through their vendor Amicus Solutions (Fedora Solutions). The details are still emerging, but the pattern is familiar: unauthorized access to protected health information, followed by the uncomfortable process of notifying patients and regulators. Healthcare organizations face a specific problem that most security […]
RDP Is the Entry Point. File Operations Are the Attack. SonicWall’s latest threat data confirms what healthcare IT teams already know: remote desktop tools are the most common entry point for attackers targeting hospitals and medical facilities. RDP credentials get phished, brute-forced, or purchased on dark web markets. Once inside, attackers deploy ransomware or exfiltrate […]
When Physical Access Meets Kernel-Level File Control The Silent Ransom Group has extorted roughly $100 million from US law firms in the last six months. When remote hacking didn’t yield enough leverage for multimillion-dollar ransoms, they tried something brazen: hiring people on Telegram for $500 to physically walk into law firms and plug in USB […]