Cybersecurity Updates
- The federal Office for Civil Rights reports that it is aware of 34.4 million patient records that have been breaches in the past 12 months.
- The FBI announced that it has received more than 1 million cybercrime complaints over the past 14 months.
- Ascension Standish Hospital of Michigan notified an unknown number of patients that their PHI was exposed during a recent breach.
- Ascension St. Joseph Hospital of Tawas City, Michigan notified an unknown number of patients that their PHI was exposed during recent breach.
- Woodholme Gastroenterology of Maryland notified 50,000 patients that their PHI was exposed after ransomware attack.
- Middletown Medical Imaging of New Jersey notified 30,000 patients that their PHI was exposed after ransomware attack.
- Buffalo Public Schools notified an unknown number of students that their personal info was exposed after ransomware attack.
- Eduro Healthcare of Salt Lake City, Utah notified an unknown number of patients that their PHI may have been exposed after a ransomware attack.
- Sincera Reproductive Medicine of Pennsylvania notified an unknown number of patients that their PHI was exposed after ransomware attack.
- Ardagh Group of Fishers, Indiana notified an unknown number of customers that their info was exposed after ransomware attack.
- Utility Trailer Manufacturing, ,headquartered in City of Industry, California notified an unknown number of customers that their info was exposed after ransomware attack.
- Arizona Asthma & Allergy Institute notified 50,000 patients that their PHI may have been exposed due to misconfigured server.
- The State of Wyoming notified 164,000 citizens that their PHI was exposed after it was inadvertently posted to public website. The state’s CIO, Gordon Knopp, and Healthcare Director Michael Ceballs both resigned as a result.
- Mercedes Benz cars have 5 critical security vulnerabilities according to Tencent Security Keen Lab, that could be exploited for remote code execution.
- The Staten Island Fire Department is being sued by a patient who is alleging that an ambulance employee illegally posted their PHI.
- The Tigerton School District of Wisconsin notified an unknown number of students that their info was exposed after ransomware attack.
- Hidalgo Medical Services of New Mexico notified 2,179 patients that their PHI was exposed after data breach.
- Aaron Willis of Maryland was sentenced to 36 months probation for accepting $40,000 bribe to sharing personal info on citizens while he was employed by Metropolitan Police Department.
- Beech Acres Parenting Center of Ohio notified up to 17,000 people that their info may have been exposed after email phishing attack.
- Sierra College of Roseville, CA notified an unknown number of students that their info was exposed after ransomware attack.
- The Alaska Department of Health and Social Services notified an unknown number of patients that their PHI may have been exposed after cyber security incident.
- The New York State Department of Financial Services is notifying customers who use car insurance instant quote websites are being hacked and their info may be stolen.
Insurance companies with breaches include:
o Metromile
o Root Insurance
o Hagert Insurance Agency
o Farmers Insurance
o 21st Century Insurance
o American Family Mutual Insurance
o Nobir Reciprocal Exchange
o GEICO
o State Automobile Mutual Insurance
o Midvale Indemnity
o Alfa Insurance