.png?width=200&height=78&name=CH%20Diligence%20(thicker%20line).png "CH Diligence (thicker line).png")
The target: Lake County Health Department, a Chicago-based centre for management of health services.
The take: Exposure of name, date of birth, phone number, email address, and Covid-19 vaccination status for over 700 patients.
The attack vector: The data was exposed through an unsecured Google sheet saved on an employee’s private Google Drive account which was being accessed by company employees.
This breach is a critical reminder of the importance of robust security controls wherever customer data is concerned. Using private services poses a great threat as these are not subject to a company’s cybersecurity standards, and nor are their authentication controls in place. It also exposes the data to credential stuffing attack. If the employees personal account was compromised anywhere else, access to the company data is now at risk. Strict separation between personal and professional IT systems is critical for maintain an accurate picture of access and control.
Yahoo News: Fraud and hacking soared during the pandemic as criminals “took advantage of behavioural changes” while reports of domestic abuse-related offences also rose, official figures show.
Business Wire: ExtraHop, the leader in cloud-native network detection and response, today announced the completion of its acquisition by Bain Capital Private Equity and Crosspoint Capital Partners.
CRN: Private equity goliaths, SPACs, and pure-play security mainstays spent nearly $31 billion on the year‘s top cybersecurity acquisitions, placing big bets on securing networks and endpoints as well as managing employee and customer access.
Tech Crunch: Thoma Bravo-owned Sophos has announced it’s acquiring Braintrace, a cybersecurity startup that provides organizations visibility into suspicious network traffic patterns. Terms of the deal were not disclosed.
EurekAlert!: A new study of almost 12,000 Australians has found one-third of the adult population has experienced pure cybercrime during their lifetime, with 14% reporting this disruption to network systems in the past 12 months.
SABC News: President Joe Biden and senior US officials will meet private sector leaders on August 25 to discuss ways to beef up cyber security, a White House spokesperson said on Wednesday, underscoring the need for collective action.
CBC: The United States, Canada, and numerous other nations formally blamed China on Monday for a massive hack of the Microsoft Exchange email server software and accused Beijing of working with criminal hackers in ransomware attacks and other cyber operations.
The target: Artwork Archive, an online platform used to connect artists and buyers based in Denver, Colorado.
The take: 200,000 records of Personally Identifiable Information including: first and last name, physical addresses, email addresses, phone numbers, and purchase details with sales agreements.
The attack vector: An unsecured Amazon S3 storage server was misconfigured, allowing anyone with an internet connection to access and download the data.
The exposure of personal information can lead to highly targeted phishing and fraud attacks. Given how detailed the information was in this exposure, the threat of spear-phishing campaigns is high. Use of authentication protocols is an integral part of maintaining a rigorous cybersecurity posture, and it is critical to employ industry standard practices of credential management, user authentication and validation, around all storage of customer data.
CBS News: Following a slew of high-profile ransomware attacks, the Biden administration has formed a multi-agency government task force aimed at curtailing malicious, state-sponsored cyber activity and hardening the nation's cybersecurity defenses, as more and more of American critical infrastructure migrates online.
Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →
Montreal
1080 Côte du Beaver Hall, Suite 904
Montreal, QC
Canada, H2Z 1S8
+1-450-465-8880
Halifax
168 Hobsons Lake Drive Suite 301
Beechville, NS
Canada, B3S 0G4
Tel: +1 902 429 8880
Manila
10th Floor, Two Ecom Center
Mall of Asia Complex
Harbor Dr, Pasay, 1300 Metro Manila
Philippines
Sydney
Level 15 Grosvenor Place
225 George Street, Sydney NSW 2000
Australia
Tel: +61 (2) 8823 3370
Abu Dhabi
Floor No. 15 Al Sarab Tower,
Adgm Square,
Al Maryah Island, Abu Dhabi, UAE
Tel: +971 (2) 694 8510
Copyright © 2021 Entreprise Castle Hall Alternatives, Inc. All Rights Reserved.
Terms of Service and Privacy Policy