Bi-Bett Corporation
June 13, 2023
•[ hack, phishing, healthcare ]
Bi-Bett Corporation files a notice of data breach after discovering that an unauthorized party was able to access an employee's email account containing sensitive patient information.
EliTech Group
June 5, 2023
•[ ransomware, malware, healthcare ]
The Snatch ransomware group claims to have breached EliTech group, based in Paris, a global in-vitro diagnostics company with laboratories in more than 100 countries around the world and over 650 employees.
Wake Family Eye Care
June 2, 2023
•[ ransomware, malware, healthcare ]
Wake Family Eye Care files a notice of data breach after discovering that a recent ransomware attack compromised confidential patient information.
Centro Basile
June 12, 2023
•[ hack, healthcare ]
Centro Basile, an Italian healthcare company, is hit with a cyber attack.
Regional Family Medicine
June 8, 2023
•[ hack, healthcare ]
Regional Family Medicine files a notice of data breach after discovering that what initially appeared to be an IT outage was really a cyberattack.
Realm IDX
June 5, 2023
•[ leak, sqlinjection, healthcare ]
Realm IDX, a diagnostics company, confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Mount Desert Hospital
June 5, 2023
•[ ransomware, malware, healthcare ]
The Snatch ransomware group claims to have breached Mount Desert Hospital in Maine.
Coastal Orthopedics & Sports Medicine of Southwest Florida
June 11, 2023
•[ hack, healthcare ]
Coastal Orthopedics & Sports Medicine of Southwest Florida posts a "Notice of Privacy Event" on its website after discovering that an unauthorized party was able to gain access to the company's computer network.
ABIM (American Board of Internal Medicine)
June 6, 2023
•[ hack, sqlinjection, healthcare ]
ABIM confirm to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 Vulnerability
Harris Health System
June 2, 2023
•[ hack, sqlinjection, healthcare ]
Harris Health System notifies patients and employees that some of their protected health information may have been compromised during a cyberattack exploiting the CVE-2023-34362 MOVEit vulnerability.
Pathology Resource Network
June 1, 2023
•[ leak, sqlinjection, healthcare ]
Pathology Resource Network (PRN) adds a website notice on its homepage after discovering that Cadence Bank, which provides treasury management services to PRN, experienced a MOVEit-related data breach.
CareNet Medical Group (CMG)
June 2, 2023
•[ hack, healthcare ]
CareNet Medical Group (CMG) files a notice of data breach after learning that hackers were able to obtain confidential patient information stored on the company's IT network.
Tampa General Hospital
May 31, 2023
•[ ransomware, malware, healthcare ]
Tampa General Hospital discloses that the sensitive data of 1.2 million was stolen in a failed ransomware attack.
Paramedic Billing Services
May 31, 2023
•[ hack, healthcare ]
Paramedic Billing Services announces that it fell victim to a cyberattack in late May 2023.
Meadville Medical Center
May 30, 2023
•[ hack, healthcare ]
Meadville Medical Center confirms that it was affected by the MOVEit Transfer hacks
Morris Hospital
May 22, 2023
•[ ransomware, malware, healthcare ]
The Morris Hospital is hit with a Royal ransomware attack.
Centers for Medicare & Medicaid Services
May 31, 2023
•[ leak, sqlinjection, healthcare ]
The Centers for Medicare & Medicaid Services (CMS) notified 612,000 Medicare beneficiaries of a data breach stemming from a vulnerability in Progress Software's MOVEit Transfer software.
Non-profit organization(s) in Saudi Arabia
May 31, 2023
•[ espionage, malware, healthcare ]
Researchers from Cisco Talos disclose a stealthy cyberespionage campaign that targeted a non-profit organization in Saudi Arabia with a backdoor named Zardoor, and remained undetected for two years.
University of Texas Southwestern Medical Center (UTSW)
May 30, 2023
•[ leak, misconfiguration, healthcare ]
Reports begin to emerge about a MOVEit data breach at the University of Texas Southwestern Medical Center (UTSW) resulting in an unauthorized party being able to access patients' sensitive information.
Jefferson County Health Center
May 30, 2023
•[ ransomware, malware, healthcare ]
Jefferson County Health Center reveals that unauthorized individuals gained access to its network between April 04, 2023, and May 30, 2023, and may have obtained files containing patients' protected health information. The Karakurt ransomware gang claims responsibility for the attack.
