Unauthorized systems access has prompted the exfiltration of names and other personal data, said Regional Care in a filing with the Office of the Maine Attorney General that noted the breach's discovery almost a week after the intrusion commenced.
IntelBroker disclosed that the exposed data trove included Cisco's Identity Services Engine security policy platform, Secure Access Service Edge solution, Webex collaboration platform, Umbrella DNS cloud security platform, IOS XE and XR operating systems for switches and routers, and the C9800-SW-iosxe-wlc.16.11.01 Wireless LAN Controller image.
Aside from names and phone numbers, other information compromised as a result of the data breach may have also included birthdates, medical record numbers, details regarding health conditions, prescriptions, and treatments, and some Social Security numbers, said ConnectOnCall in a statement.
Unauthorized access into the HSCs' network from Sep. 17 to 19 enabled the varying exposure of individuals' full names, birthdates, Social Security numbers, physical addresses, driver's license and government ID numbers, financial account details, medical information, diagnosis and treatment details, health insurance data, and billing/claims details.
Infiltration of SRP Federal Credit Union's systems between Sep. 5 and Nov. 4 resulted in the compromise of individuals' names, birthdates, Social Security numbers, financial details, and driver's license numbers.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.