Phishing Attacks

Healthcare Employee Cybersecurity Training is Lacking, Report Finds

by Jill McKeon

Thorough and frequent employee cybersecurity training can ensure enterprise-wide security and prevent cyberattacks, while poor and infrequent training can leave an organization’s network...

4 Ways Organizations Can Prevent Healthcare Phishing Attacks

by Jill McKeon

With one wrong click, a healthcare phishing attack can take down entire networks, encrypt files, and put patient data in jeopardy. The smartest attackers take advantage of victims by claiming to be a...

FBI Flash Alert Warns Organizations of Hive Ransomware Group

by Jill McKeon

The FBI released a flash alert warning organizations about Hive ransomware, a hacking group responsible for the recent cyberattack on Memorial Health System in mid-August that resulted in EHR downtime,...

Healthcare Phishing Scam Exposes PHI for 12K Patients in UT

by Jill McKeon

Utah-based health system Revere Health announced it was the victim of a healthcare phishing scam on June 21 that exposed the protected health information (PHI) of 12,000 patients at the Heart of Dixie...

UF Health Cyberattack Now Affecting Patient Care

by Jill McKeon

A May 31st cyberattack on the University of Florida Health Leesburg Hospital and The Villages Regional Hospital led to EHR downtime, forcing clinicians to use pen and paper to document patient care....

Phishing Attack on Five Rivers Health Impacts Data of 156K Patients

by Jessica Davis

Ohio-based Five Rivers Health Centers recently notified 155,748 patients that their personally identifiable and health information was breached after a two-month long email compromise last year,...

Microsoft: Active NOBELIUM Malware Actors’ Spear-Phishing Campaign

by Jessica Davis

The malware threat actors behind the SolarWinds Orion compromise in 2020 are continuing to target Microsoft networks and cloud assets, according to Microsoft insights. NOBELIUM historically targets...

Healthcare’s Email Problem: Insider Threats, Data Retention, Phishing

by Jessica Davis

Reports consistently highlight the risk of vulnerability exploits and ransomware to healthcare. But email is often the key access point in these attacks, through phishing and stolen credentials. As insiders remain a leading threat,...

Ransomware Hits Scripps Health, Disrupting Critical Care, Online Portal

by Jessica Davis

Scripps Health in San Diego was hit by a ransomware attack over the weekend, forcing the health system into EHR downtime. Some critical care patients were diverted and the online patient portal...

COVID-19 Vaccine Cold Chain Entities Remain Key Spear-Phishing Target

by Jessica Davis

Threat actors are continuing to target the COVID-19 vaccine cold chain, the means of delivering and storing vaccines at safe temperatures, with spear-phishing campaigns that leverage pharma and...

Feds Seize Fraudulent COVID-19 Vaccine, Pharmacy, Pfizer Websites

by Jessica Davis

Multiple fraudulent COVID-19 vaccine, pharmacy, and other pandemic-related websites have been taken down, as a result of a federal government enforcement effort to combat fraud schemes and attacks...

Attackers Target Medical Research Staff with Credential Phishing Attacks

by Jessica Davis

Senior medical research personnel in the US and Israel are being targeted by a credential phishing campaign launched by a nation-state hacking group with ties to Iran, according to a new Proofpoint...

Pharmacy, Hospital Phishing Attacks Spike 189% Amid Vaccine Rollout

by Jessica Davis

The number of phishing attacks targeting pharmacies and hospitals increased by 189 percent from December 2020 to February. These often large-scale campaigns correlated to hackers attempting to...

FBI Alerts to Rise in BEC Cyberattacks on US Orgs, Impacting Resources

by Jessica Davis

The FBI recently warned private sector entities that cybercriminals are increasingly leveraging business email compromise attacks against federal government agencies, which has hindered...

FBI: $4.2B Lost to Cybercrime in 2020, Led By Phishing, BEC, Extortion

by Jessica Davis

The latest FBI IC3 Internet Crime Report shows that cybercrime cost individuals and US businesses about $4.2 billion in losses in 2020, up 69 percent from $3.5 billion in 2019. Phishing, non-payment...

Data of 50K PACE Program Patients Stolen from PeakTPA Cloud Servers

by Jessica Davis

Healthcare business associate Peak TPA is notifying 50,000 PACE program patients that their data was stolen from two of its cloud servers by an attacker. The third-party administrator supports claims...

Feds Warn of TrickBot Spear-Phishing Attacks Delivering Malware Payload

by Jessica Davis

A joint federal alert warns that all entities should be on the alert for a newly observed spear-phishing campaign, leveraging malicious emails to deliver the TrickBot malware payload....

Over 300K Patients Affected by Elara Caring, Woodcreek Provider Breaches

by Jessica Davis

Woodcreek Provider Services and Elara Caring recently reported healthcare data breaches impacting more than 300,000 patients. The tallies are some of the largest reported in the healthcare sector...

Vaccine Rollout Spurs 372% Rise Bad Bots; Spear-Phishing Up 26%

by Jessica Davis

The vaccine rollout has spurred an increase in nefarious activities tied to the response. Imperva found a whopping 372 percent surge in bad bot traffic against healthcare sites, while...

50% Phishing Emails Seek Credential Theft, as Malware Delivery Declines

by Jessica Davis

The number of phishing campaigns delivering malware has drastically decreased in recent years, with just 12 percent of phishing deploying malware. On the other hand, 57 percent of all phishing...