Page 17 - Threat Intelligence 11-27-2019

Data Breaches &

Attacks

Ransomware Bites 400 Veterinary Hospitals. National Veterinary Associates (NVA), a California company that
owns more than 700 animal care facilities around the globe, is still working to recover from a ransomware
attack late last month that affected more than half of those properties, separating many veterinary practices
from their patient records, payment systems and practice management software. NVA says it expects to have
all facilities fully back up and running normally within the next week. NVA said it discovered the ransomware
outbreak on the morning of Sunday, Oct. 27, and soon after hired two outside security firms to investigate and
remediate the attack. A source close to the investigation told KrebsOnSecurity that NVA was hit with Ryuk, a
ransomware strain first spotted in August 2018 that targets mostly large organizations for a high-ransom
return.
Source: https://krebsonsecurity.com/2019/11/ransomware-bites-400-veterinary-hospitals/

Open AWS database leaks PayMyTab customers’ personal info. PayMyTab — an at-table payment system —
is a mobile app and device that enables diners to settle their checks using their secure EMV chip-enabled
credit card. It also enables guests to split the bill and pay it, tip included, directly from their own phones. The
leaked personal information included the following details:
• Customer’s name
• Email address or cell telephone number
• Last 4 digits of the payment card number
• The meal items ordered
• The date, time, location, and the name of the restaurant visited
Source: https://thenextweb.com/security/2019/11/19/open-aws-database-leaks-paymytab-customers-
personal-info/

Louisiana government computers knocked out after ransomware attack. Louisiana state government
computers were knocked out following a ransomware attack, the governor said on Monday, as results from
the close gubernatorial election in the southern state await certification. Many state agencies had their servers
taken down in response to the attack, Governor John Bel Edwards said in a series of messages posted to
Twitter. He said the agencies were coming back online but that full restoration could take "several days.“A
person familiar with the matter identified the particular breed of ransomware that struck Louisiana as Ryuk, a
variant that cybersecurity firms first identified in August of last year.
Source: https://news.yahoo.com/louisiana-government-computers-hit-ransomware-223701820.html

www.accumepartners.com
15