Services that leaked customer data, and what affected people should do.
SecurityWeek reports that Oracle Health says personal and medical information from its legacy Cerner systems was compromised in a cyberattack. The data may have included names, Social Security numbers, and medical record details such as diagnoses, medicines, test results, images, and care information. People affected should watch for suspicious account activity and follow any notice from Oracle Health or their healthcare provider.
Source: securityweek.com
SecurityWeek reports that Southern Company is notifying roughly 400,000 customers that an unauthorized third party accessed utility account information through its online customer portal. The exposed data may include names, mailing addresses, phone numbers, email addresses, the last 4 digits of Social Security numbers, and other basic account details. The company says it stopped the activity and is offering affected customers a year of free credit monitoring.
Source: securityweek.com
Infosecurity Magazine reports that unauthorized access to Denmark’s Central Register of Persons exposed names, addresses and CPR numbers for about 8.8 million registered people. The government said the access happened through a private Danish company’s legal access to the system. People should watch for unusual account activity, use unique passwords, keep devices updated and be careful if anyone asks for sensitive information by email, phone or other channels.
Source: infosecurity-magazine.com
The Record reports that Ukraine’s largest grocery store chain, ATB, confirmed a cyberattack after hackers posted an extortion demand on its website and claimed they had stolen data from millions of customers. The hackers said the data included names, phone numbers, email and physical addresses, password hashes, and employees’ passport information. People who shopped there should watch for phishing, change reused passwords, and monitor accounts for suspicious activity.
Source: therecord.media
DataBreaches.net reports that the Slate Valley Unified School District in Vermont is responding to a security incident and has refused to pay a ransom demand. Kairos says it has 762 GB of data, including SQL databases with personal and medical information about students and employees. People connected to the district should watch for account and identity misuse and follow any district notices.
Source: databreaches.net
DataBreaches.net reports that Italy’s Data Protection Authority fined IQVIA €7 million after finding that a database of health information on one million patients was not anonymous. The authority said the data could be re-identified, and that the company processed health data without a proper legal basis, did not inform patients adequately, and failed to take adequate security measures. People affected should watch their accounts and be careful with any health-related information tied to them.
Source: databreaches.net
DataBreaches.net reports that Italy’s data protection authority fined IQVIA €7 million after finding it had built a database with health information on one million patients from 800 family doctors. The regulator said the data was not anonymous and included identifying details for over 3,300 patients. People affected should watch for any notices about the breach and be careful with accounts tied to their medical information.
Source: databreaches.net
