Threat Intelligence Brief
Curated summary with source attribution
Source: dallasnews.com
Threat Risk: Medium
Victim: Eyemart Express
Incident: Data breach involving the theft of customer PII and medical records.
Impact: Compromise of SSNs and health information for thousands of customers across 40 states.
Attacker: PayoutsKing
Analysis: The breach involved unauthorized access to systems, resulting in the theft of high-value PII and PHI. The ransomware group PayoutsKing, which shares ties with BlackBasta, has claimed responsibility for the attack. The incident is further complicated by allegations of delayed notification to the victims.
Recommendations: Implement robust encryption for PII and PHI data at rest; Establish a strict, time-bound incident response plan for victim notification; Audit internal access controls to prevent unauthorized system entry
Source: Dallas Morning News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source