Threat Intelligence Brief
Curated summary with source attribution
Source: ktul.com
Threat Risk: Medium
Victim: ONEOK and Urologic Specialists of Oklahoma
Incident: Dual data breaches resulting in the theft and leak of sensitive corporate and patient data.
Impact: Exposure of Social Security numbers, financial info, and PHI, alongside temporary operational disruptions.
Attacker: Redact and Everest
Analysis: Threat actors Redact and Everest targeted an energy company and a medical practice, respectively, stealing combined hundreds of gigabytes of data. The incidents involved the compromise of cloud accounts and network infiltrations, leading to the exposure of PII and PHI. These cases highlight the vulnerability of specialized sectors to opportunistic data extortion.
Recommendations: Enforce phishing-resistant multi-factor authentication (MFA) across all cloud service accounts.; Implement strict network segmentation to prevent attackers from accessing large volumes of sensitive data.; Conduct regular third-party security audits to identify and remediate vulnerabilities in patient and employee data stores.
Source: KTUL
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source