https://blog.dansec.red/vendors/frederick-health-medical-group/Recent content in Frederick Health Medical Group on DanSec DailyHugoen-gbFri, 25 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-25-cybersecurity-news/Fri, 25 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-25-cybersecurity-news/<h2 id="major-incidents-and-breaches">Major Incidents and Breaches</h2> <ul> <li> <p><strong>Healthcare Sector Data Breaches</strong></p> <ul> <li>Frederick Health Medical Group suffered a ransomware attack in January, exposing data of nearly one million patients.</li> <li>Yale New Haven Health (YNHHS) disclosed a breach affecting 5.5 million patients, with threat actors stealing personal data.</li> <li>The Interlock ransomware gang claimed responsibility for an attack on DaVita, a kidney dialysis firm, and has leaked stolen data.</li> <li>The 2023 cyberattack on Long Beach, California, has been confirmed to have leaked data of nearly 500,000 individuals.</li> </ul> </li> <li> <p><strong>Lazarus Group Espionage Campaign</strong></p> <ul> <li>North Korea-linked Lazarus Group targeted at least six South Korean organizations across software, IT, finance, and telecommunications sectors.</li> <li>Attackers exploited flaws in Cross EX and Innorix software, deploying ThreatNeedle malware in watering hole attacks.</li> </ul> </li> <li> <p><strong>Microsoft 365 Account Hijacking</strong></p> <ul> <li>Russian threat actors exploited OAuth 2.0 authentication workflows to hijack Microsoft 365 accounts, targeting organizations related to Ukraine and human rights.</li> </ul> </li> </ul>