Page 15 - Threat Intelligence 10-28-2019

Data Breach

9 Unsecured Medical Databases Found Leaking Sensitive Patient Data. Researchers from WizCase recently
discovered nine separate, unsecured medical websites leaking sensitive data from millions of patients around
the world, including health information, Social Security numbers, and other sensitive data. The security team
from WizCase, led by Avishai Efrat, discovered the misconfigured websites, using tools openly available to the
public. The team works to help companies secure their data. Each of the databases examined in the report
were unsecured and did not require a password to be accessed, which left the data of millions of patients
vulnerable.
Source: https://healthitsecurity.com/news/9-unsecured-medical-databases-found-leaking-sensitive-
patient-data

Indiana Hospital System Notifying Patients After Data Breach. Methodist Hospitals has been mailing letters to
patients detailing the steps they can take to safeguard themselves against possible fraud, The (Northwest
Indiana) Times reported Wednesday. Methodist, which has campuses in Gary and Merrillville, said it was
alerted in June to questionable activity on a staffer’s email account and that it learned in August that two
employees had fallen victim to an email phishing scam in which an unauthorized user got access to their
accounts, the hospital system said in a news release.

Source: https://www.securityweek.com/indiana-hospital-system-notifying-patients-after-data-breach

U.S. Government, Military Personnel Data Leaked By Autoclerk. A leaky database owned by reservations
management system Autoclerk has exposed the personal data and travel information for thousands of users –
including U.S. government and military personnel. Autoclerk, which was acquired by the Best Western Hotel
and Resorts Group in August, provides reservation management software for hotels, accommodation
providers, travel agencies and more. Researchers with vpnMentor on Monday said that they discovered an
Elasticsearch database, owned by Autoclerk, exposed online that contained over 100,000 booking reservations
for travelers.
Source: https://threatpost.com/government-military-personnel-data-leaked/149386/

www.accumepartners.com
15