Week in Breach
It’s all ransomware all the time this week with a spate of damaging attacks in the U.S., U.K. and South America. Plus, find out which training videos are the most popular and take a look at the two threats that make up almost three-quarters of cyberattacks.
Entrust
https://www.securityweek.com/ransomware-group-threatens-leak-data-stolen-security-firm-entrust
Exploit: Ransomware
Entrust: Cybersecurity Solutions Company
Risk to Business: 1.877 = Severe
Entrust has fallen victim to a ransomware attack by the LockBit group. LockBit added Entrust to its Tor site last Thursday. The Minneapolis-based provider of payment security solutions confirmed the incident. The company admitted that threat actors had gained access to systems used for HR, finance and marketing, but said there was no evidence that the operation or security of its products and services was impacted.
Individual Impact: No information about consumer/employee PII, PHI or financial data exposure was available at press time.
How It Could Affect Your Customers’ Business: Ransomware groups have been ramping up operations, with risk up by over 60%.
ID Agent to the Rescue: Our Monsters of Cybersecurity eBook helps you discover and mitigate the killer risks that are lurking around every corner. DOWNLOAD IT>>
Practice Resources LLC
Exploit: Misconfiguration
Practice Resources LLC: Medical Billing Service
Risk to Business: 1.687 = Severe
Practice Resources LLC (PRL) is at the center of a ransomware attack that led to a supply chain data breach impacting 26 healthcare organizations. In a filing, PRL declared that 942,138 people had data exposed in the April 2022 incident. The company provides billing and other related services to healthcare providers. PRL declared that it has sent out data breach letters to all affected parties.
Individual Risk: 1.733 = Severe
The information exposed in the attack included patient names, addresses, health plan numbers, dates of treatment, and medical record numbers.
How It Could Affect Your Customers’ Business Supply chain risk has been a constantly rising risk for businesses as bad actors target service providers.
ID Agent to the Rescue: Learn to build an effective program that reduces cyberattack risk with the guide How to Build a Security Awareness Training Program. DOWNLOAD IT>>
Valent U.S.A. LLC
https://www.jdsupra.com/legalnews/valent-u-s-a-llc-announces-data-breach-5375329/
Exploit: Ransomware
Valent U.S.A. LLC: Agricultural Chemical Manufacturing
Risk to Business: 1.902 = Severe
Chemical company Valent U.S.A. LLC has filed notices that it experienced a data breach as a result of a suspected ransomware attack. The company revealed that the attack was discovered when employees were unable to access some of Valent’s computer systems and subsequently discovered that files had been encrypted. Valent said that it secured its network and then retained an outside cybersecurity firm to investigate the incident.
Individual Risk: 1.768 = Severe
The company says the breach resulted in the names, Social Security numbers, driver’s license numbers, passport numbers, financial account information, medical information and dates of birth of certain individuals being compromised.
How It Could Affect Your Customers’ Business: Both the Chemical and Agricultural sectors have been under heavy pressure from bad actors in the last 12 months.
ID Agent to the Rescue: See the biggest risks that businesses in different sectors face today and get a look your clients will be facing tomorrow in The Global Year in Breach 2022. DOWNLOAD IT>>
Brasseler USA
https://www.jdsupra.com/legalnews/brasseler-usa-announces-data-breach-4677092/
Exploit: Ransomware
Brasseler USA: Dental Equipment Manufacturer
Risk to Business: 2.077 = Severe
Brasseler USA has disclosed that it experienced a data breach as a result of a ransomware attack. The company discovered that this incident occurred in June 2022. In July 2022, the company learned that certain files containing sensitive consumer data were compromised. The company says that it reported the incident to law enforcement and then worked with third-party data security specialists to investigate the scope of the cyberattack Brasseler USA is a dental and surgical product manufacturer based in Savannah, Georgia.
Individual Risk: 1.966 = Severe
Breached information varies depending on the individual, but may include an individual’s name, Social Security numbers, driver’s license numbers, passport number, financial account information (including debit card and credit card numbers), medical and insurance information and other information, such as date of birth.
