Breach

The Department of Justice will more aggressively pursue contractors and grantees for misrepresenting their cybersecurity posture to the government. While few doubt there's a real problem to be solved, some in the legal and contracting community have raised questions about whether it could clash with other Justice and Biden administration cybersecurity priorities, and whether a good intentioned initiative could create a chilling effect among companies seeking government opportunities.

Nearly every company in a new survey said they were negatively impacted by a breach in their supply chain or suffered a direct breach as a result of supply chain weaknesses.

Although just 14,000 patients were impacted by its 2017 data breach, Diamond Institute must overhaul its cybersecurity program and pay a hefty penalty over serious security flaws found by New Jersey’s acting attorney general.

This week's health care breach roundup is led by a ransomware attack on Quest Diagnostics' subsidiary ReproSource, which led to the possible access or theft of health information tied to 350,000 patients. Other health care security incidents include multiple systems' hacks and email incidents.

Two lawsuits filed against UC San Diego Health late last week, allege that a four-month employee email hack that breached the data of nearly 500,000 patients was caused by negligence and other security failings.

All individuals who've used services from the Alaska DHHS are being notified that their data was possibly stolen during a cyberattack four months ago. Officials have been transparent about the ongoing criminal investigation and network outages, but the incident spotlights continued challenges faced by government and health departments.

This week’s health care data breach roundup is led by a systems hack and data exfiltration incident at USV Optical. Other incidents include several email hacks, ransomware, and further data theft.