The credentials gave them access to I-MED’s radiology patient portal, and with that, to files showing patients’ full names, dates of birth, sex, which scans they received, and dates of the scans. An anonymous person has disclosed that they gained online access to a radiologist’s platform that hosted patient information using stolen credentials. The person said they found the credentials in a data set that came from another breach, meaning it’s highly likely that the account holder used the same credentials for more than one service. The news about the leak comes at a bad time for I-MED, following recent accusations that it allowed a startup to use patient data to train an Artificial Intelligence (AI) without consent. If you want to find out what personal data of yours has been exposed online, you can use our free Digital Footprint scan. October 1, 2024 - The Data Protection Commission has fined Meta $101M because 600 million Facebook and Instagram passwords were stored in plaintext. The whistleblower told Crikey they found log-in details for three accounts in the data that belonged to a hospital. October 1, 2024 - Next time you need to activate a subscription on your TV, watch out for these fake sites scammers are using to trick you and steal your money. This level of authentication is below par by any standard, but it’s especially unacceptable when it concerns sensitive patient data. And to make things worse the accounts had passwords three to five letters in length and were not protected by two-factor authentication (2FA). Criminals with access to the credentials from Site A will then try them on sites B and C, often in automated attacks. The credentials had been available online to cybercriminals for over a year. There are some actions you can take if you are, or suspect you may have been, the victim of a data breach. September 27, 2024 - Researchers found a method to remotely take over any Kia with only the license plate number as a starting point. Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.
This Cyber News was published on www.malwarebytes.com. Publication date: Thu, 03 Oct 2024 12:43:05 +0000