Insider Breach at Hospital Exposed Data for a Decade

A major healthcare provider is notifying 5,000 patients about a decade-long insider data breach. A former employee improperly accessed electronic health records for ten years before the activity was discovered. The organization delayed notifying patients for four years at the request of law enforcement to avoid impeding an investigation. Compromised information includes names, medical histories, and, in some cases, Social Security numbers. The provider is now offering complimentary credit monitoring services to those affected by the exposure of their most sensitive data.

Latest mentioned: 10-08

Earliest mentioned: 10-07

Sources

databreaches.net databreachtoday.com

Also Read

Sophisticated Malware Targets WordPress E-commerce Sites

The Wordfence Threat Intelligence Team has discovered a complex malware campaign targeting WordPress e-commerce sites using the WooCommerce plugin. The malware, disguised as a rogue plugin, employs advanced encryption, fake images, and remote command access for persistent exploitation. It logs user credentials, establishes backdoors, and injects JavaScript skimmers into checkout pages to steal credit card data. The campaign is attributed to Magecart Group 12, known for their persistent credit card skimming activities.

10-31Read more →