Breach

HealthITSecurity reports that Texas-based St. Luke's Health has disclosed experiencing a third-party data breach involving consulting services vendor Adelanto Healthcare Ventures, which has impacted 16,906 patients.

Panama-based cryptocurrency exchange Deribit has disclosed being impacted by a hacking incident that resulted in the theft of $28 million, reports The Record, a news site by cybersecurity firm Recorded Future.

Oklahoma-based Massengale Eye Care has reported that 15,000 of its patients had their data compromised during the data breach on Eye Care Leaders in December, which has already impacted over 2 million individuals, HealthITSecurity reports.

Aveanna Healthcare in Georgia will pay Massachusetts $425,000, after that state’s investigation found the lack of proper security measures likely caused its healthcare data breach in 2019.

The closely watched lawsuit has fueled an ongoing discussion over who should pay when businesses are hit by state-sponsored cyberattacks, and could have broader implications for policymakers, highlighting the urgent need for them to devise practical, long-term solutions to address increasing cyber threats blamed on nation-state actors.  

The ‘safe harbor’ provision of the HITECH Act mandates the HHS OCR to consider recognized best practices after a healthcare data breach. Its new video outlines the required evidence.

Threat actors could exploit Experian's knowledge-based verification offering Precise ID to facilitate partial Social Security number leaks, according to CyberScoop.