Breach

Ransomware demands averaged $2.2 million in 2021, which was 144% higher than in 2020, while organizations impacted by ransomware attacks paid $541,010 on average, which was 78% higher than the year prior, reports The Register.

The first HHS OCR enforcement action of 2022 settles four potential HIPAA compliance failures with three dental practices and a psychiatric medical services provider, two of which over right of access violations.

This week’s healthcare data breach includes multiple ransomware-related data access incidents and led by a Horizon Actuarial data theft and extortion incident that involved MLB benefit plan member data.

Security teams need to focus more on preventing insider attacks in the wake of the Okta breach.

The Lapsus$ extortion group took issue with public statements by Okta's leadership claiming that the company was not breached. Okta's CEO acknowledged about 2.5% of their clients were potentially impacted, which would equate to about 375 of Okta's roughly 15,000 customers.

Taylor Regional Hospital in Kentucky has nearly recovered its network after a cyberattack deployed 10 weeks ago. But the investigation revealed a long-term hack and data theft.

The Lapsus$ extortion group posted screenshots to its Telegram channel Monday night they say prove they breached identity management vendor Okta. The group said the Okta breach was not intended to get data from Okta, but instead leverage the access to Okta to attack Okta clients.