Aside from IP addresses and social media details, more than 1,800 plaintext passwords belonging to staffers have also proliferated across the dark web, findings from a joint Proton and Constella Intelligence report showed.
Infiltration of a Michigan Medicine employee account through a malicious multi-factor authentication prompt has enabled attackers to access and exfiltrate emails containing patients' names and medical record numbers, as well as diagnostic or treatment details.
Included in the nearly 500 MB data trove leaked by grep were information on Dell's internal ticketing system, including Agile and VPN incident reports and other ticket summaries for VPN improvements and DevOps software access requests.
Hunters International claimed in a post on its extortion portal last week that it had exfiltrated terabytes of data from the auto dealership company, including its network-attached storage images, databases, financial documents, databases, and human resource files.
More than 3.1 million individuals were confirmed by the Centers for Medicare & Medicaid Services to have had their information compromised as a result of the widespread MOVEit hack conducted by the Cl0p ransomware operation against Medicare admin services provider Wisconsin Physicians Service last year.
Such an intrusion resulted in unauthorized access to Franklin County's poll book records, which included individuals' names, Social Security numbers, financial account numbers, driver's license numbers, medical record numbers, insurance identification numbers, COVID-19-related details, vaccination information, and/or insurance or billing details.
Records exposed by grep were divided into a pair of call-tracking TXT files, the first of which detailed phone calls' start and end times, callers' and recipients' phone numbers, and call status, duration, and notes, as well as call interpreters' IDs.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
