vz-risk / VCDB

VERIS Community Database
Other
569 stars 181 forks source link

Talbert House network cyberattack leads to data theft #18137

Open swidup opened 2 years ago

swidup commented 2 years ago

https://www.scmagazine.com/analysis/incident-response/ongoing-ransomware-data-theft-leaks-prove-problematic-in-health-care. Code only this case in this issue. The others mentioned in the article are accounted for in other issues.

A threat actor gained access to the Talbert House network on June 11, which led to a period of downtime procedures to limit and stop the attacker from further nefarious activities. But before the intrusion was detected, the actor was able to access and exfiltrate the data belonging to 45,000 individuals.

Talbert House is a nonprofit community resource center focused on prevention, assessment, treatment and reintegration.

Upon discovery, Talbert House partnered with an outside cybersecurity firm to secure the network and bolster its security systems. The investigation is ongoing, but the review has confirmed the attackers stole a number of files tied to clients, employees, and other third parties.

The client data could include protected health information, contact details, medical data, health insurance details. For all other parties, SSNs, driver’s licenses, and financial account information may have been accessed during the hack. All impacted individuals will receive free credit monitoring and identity theft protection services.

Talbert House is continuing to review its security protocols and processes, in addition to enhancing employee training and education.

swidup commented 2 years ago

https://www.jdsupra.com/legalnews/consumer-data-breach-alert-talbert-house-5300062/

swidup commented 1 year ago

https://topclassactions.com/lawsuit-settlements/privacy/data-breach/talbert-house-data-breach-class-action-settlement/