Recent Cyber Security Breaches: Toshiba, City of Tulsa and More

cyber security

As a managed IT service provider it is important to us to make sure to stay in know about the latest cyber security breaches. Every few weeks we like to share our findings with you here on our blog. Please take a peek below to learn more about some of the most recent cyber security attacks here and around the world.

Toshiba (Japan)

Electronics Manufacturer

The Hack: Ransomware

Quick Summary: “European units of Japanese tech giant Toshiba are investigating a security incident in which scammers may have used a similar hacking tool to the malware used against IT systems at Colonial Pipeline. The company announced that it had been forced to disconnect network connections between Japan and Europe to stop the spread of ransomware. The attack is believed to have been perpetrated by the DarkSide ransomware gang. Toshiba Tec Group, a unit of the multinational conglomerate which makes printers and other technologies, said the firm had not yet confirmed that customer related information was leaked externally. The incident is under investigation and the company says that it has not paid any ransom.” -ID Agent

Read More Here >> Toshiba subsidiary confirms ransomware attack, as reports suggest possible DarkSide involvement

 

City of Tulsa (United States)

Municipality

The Hack: Hacking

Quick Summary: “The city of Tulsa, Oklahoma, has been hit by a ransomware attack that affected the city government’s network and brought down official websites. The attack, which took place on the night between Friday and Saturday, is under investigation and city IT crews have begun restoring functionality and data from backups. This follows a string of ransomware attacks on other US municipalities in recent weeks. City officials were careful to note that no customer information has been compromised, but residents will see delays in-network services. While emergency response is not hampered, 311, some credit card payment systems and the city’s new online utility billing system were impacted.
City of Tulsa hit by ransomware over the weekend.” -ID Agent

Read More Here >> City of Tulsa hit by ransomware over the weekend

 

Swiss Cloud (Switzerland)

Cloud Hosting Provider

The Hack: Ransomware

Quick Summary: “Cloud hosting provider Swiss Cloud was hit by a ransomware attack that brought down the company’s server infrastructure. The company is currently working to restore operations from its backups with the help of experts from HPE and Microsoft. The impacted servers are expected to be restored by next week. The disruption has impacted server availability for more than 6,500 customers.” -ID Agent

Read More Here >> Cloud hosting provider Swiss Cloud suffered a ransomware attack

 

Illinois Office of the Attorney General (United States)

State Government Agency

The Hack: Ransomware

Quick Summary: “The DopplePaymer ransomware gang has leaked a large collection of files from the Illinois Office of the Attorney General after the agency declined to pay the ransom that they gang demaded. The cybercrimnals released information from court cases orchestrated by the Illinois OAG, including some private documents that do not appear in public records. The data also contains personally identifiable information about state prisoners, notes of their grievances, and case information.” -ID Agent

Read More Here >> Ransomware gang leaks court and prisoner files from Illinois Attorney General Office

 

The Resort Municipality of Whistler (Canada)

Municipal Government

The Hack: Ransomware

Quick Summary: “The Resort Municipality of Whistler (RMOW) has temporarily suspended all online and some in-person services in the wake of a ransomware attack purprtedly carried out by an unamed new ransomware gang. The group leaked some data on it’s unfinshed dark web site and claims to have stolen 800 GB of data. RMOW states that they are currently working with cybersecurity experts and the Royal Canadian Mounted Police (RCMP) to investigate further.” -ID Agent

Read More Here >> Whistler resort municipality hit by new ransomware operation

 

CaptureRX (United States)

Medical Software Company

The Hack: Ransomware

Quick Summary: “Texas-based CaptureRx, fell victim to a ransomware attack in which cybercriminals snatched files containing the personal health information (PHI) of more than 24,000 individuals. The security breach impacted 17,655 patients of Faxton St. Luke’s Healthcare and a further 6,777 patients at Gifford Health Care as well as an indeterminate number of Thrifty Drug Store patients. CaptureRx is currently unclear how many of its healthcare provider clients have been affected by the attack. Nor has the company finished its final tally of how many individuals had their PHI exposed because of the incident.” -ID Agent

Read More Here >> CaptureRx Data Breach Impacts Healthcare Providers

*****

To learn more about how to keep your company safe and secure from cyber security attacks, click here to explore our San Diego IT Services & IT Security plans that are offered by SDTEK.

Leave a Reply