Threat Intelligence Brief
Curated summary with source attribution
Source: hipaajournal.com
Threat Risk: High
Victim: Conduent Business Services
Incident: A ransomware attack resulting in the exfiltration of personal and protected health information.
Impact: Theft of sensitive data for 62.2 million individuals and a proposed $80 million legal settlement.
Attacker: SafePay ransomware group
Analysis: The SafePay ransomware group maintained unauthorized access to Conduent’s network for nearly three months, exfiltrating 8.5 TB of data. This incident underscores the critical risk posed by ransomware actors targeting third-party business process providers who manage vast amounts of PII and PHI. The sheer scale of the theft makes this one of the largest healthcare-related breaches in history.
Recommendations: Implement strict network segmentation to limit the dwell time and lateral movement of ransomware actors; Enhance monitoring for unauthorized large-scale data exfiltration to detect breaches in real-time; Conduct rigorous security audits and risk assessments of third-party vendors handling sensitive healthcare data
Source: HIPAA Journal
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source