Threat Intelligence Brief
Curated summary with source attribution
Source: classaction.org
Threat Risk: Medium
Victim: Healthcare communication services
Incident: A data breach occurred between February and May 2024 affecting the ConnectOnCall answering service.
Impact: Unauthorized access to and exposure of private medical and personal information of US residents.
Attacker: Unidentified threat actors
Analysis: ConnectOnCall, a healthcare call-answering service, suffered a prolonged breach in early 2024 that exposed private data of US residents. The incident resulted in a $4.95 million class action settlement to cover documented losses and provide medical identity monitoring. This event underscores the systemic vulnerability of third-party vendors within the medical supply chain.
Recommendations: Audit third-party service providers for healthcare compliance and security posture.; Implement strict access controls and monitoring for call-center operations.; Deploy robust data loss prevention tools to detect unauthorized exfiltration of sensitive PII.
Source: ClassAction.org
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source