- Leading hacking group is Conti of Russia
- Started in 2020 and is successor of Ryuk aka Wizard Spider group
- Most popular target is manufacturing vertical
- 40% of Conti ransomware victims are businesses in the $10 million to $50 million revenue range
- Hackers looking for businesses who can afford to pay a substantial ransom but do not yet a mature security practice
- Need for strong protections against hackers moving laterally
- Repertoire magazine reports on healthcare cybersecurity
- 83% of healthcare organizations surveyed have implemented some degree of software supply chain risk management processes
- Top reasons for not implementing:
- 92% = too difficult to implement
- 68% = little oversight on cybersecurity
- 83% = lack of demand from federal government
- -McLaren Port Huron Hospital of Michigan has notified 49,000 patients that their PHI was exposed after cyberattack
- Dark Reading published research on data breaches
- Average breach costs soared to $9.4 million in 2022 in the US
- 60% of breaches have resulted in companies increasing their prices to consumers to recouptheir costs:
- Fed/state fines
- Cleanup
- Technological improvements
- Entrust Security, headquartered in Minneapolis, MN, notified an unknown number of customers that their info was exposed after cyberattack.
- Clinivate Inc., and EMR provider headquartered in Pasadena, CA, notified 77,652 patients that their PHI was exposed after data breach.
- Blue Cross and Blue Shield of Massachusetts notified 4,855 patients that their PHI was exposed after data breach
- City of Newport, CT notified an unknown number of residents that their info was exposed during recent email phishing attack.
- St. Luke’s Health System of Boise, Idaho has notified 31,573 patients that their PHI was exposed after data breach.
- Avamere Senior Living, headquartered in Wilsonville, Oregon, notified 197,730 patients in 96 locations that their PHI was exposed after data breach.
- OneTouchPoint, a commercial printer headquartered in Tempe, AZ, notified 38 of its healthcar customers, that patient PHI may have been exposed after hacker accessed mailing address database.
- The US Federal Court System notified an unknown number of people that it was hit with a cyber breach.
Original Post