Malware

Massive Cencora Data Breach Unveils Sensitive Patient Information from 11 Top Pharmaceutical Giants in the US

A Cencora data breach has exposed patient information from eight US drug companies. The leak stems from misconfigurations in a Cencora-owned Elasticsearch server, revealing over 37 thousand patient records.

Published

6 months ago

June 3, 2024

zendzipr

Massive Cencora Data Breach Unveils Sensitive Patient Information from 11 Top Pharmaceutical Giants in the US 1

Update: Adding three more pharmaceutical firms impacted by the Cencora security breach.

Several of the world’s largest drug companies have reported data breaches as a result of a February 2024 cyberattack on Cencora, a company they partner with for pharmaceutical and business services.

Previously known as AmerisourceBergen, Cencora is a pharmaceutical services provider specializing in drug distribution, specialty pharmacy, consulting, and clinical trial support. This Pennsylvania-based company operates in 50 countries, employs 46,000 people, and reported a 2023 revenue of $262 billion.

In February 2024, Cencora disclosed a data breach in a Form 8-K filing with the SEC, revealing that unauthorized parties had accessed its information systems and extracted personal data. At the time, the company chose not to provide any further information about the incident or its potential impact on clients, and no ransomware groups took responsibility for the attack.

Recently, the California Attorney General’s office published a series of data breach notification samples submitted by some of the largest pharmaceutical firms in the United States, all attributing their data exposure to the February Cencora incident.

“Cencora, Inc. and its Lash Group affiliate partner with pharmaceutical companies, pharmacies, and healthcare providers to facilitate access to prescribed therapies through drug distribution, free trial offers, co-pay coupons, patient support and services, and other services,” reads a related data breach notification from Novartis.

“We take the privacy and protection of the information entrusted to us very seriously. Cencora is writing to let you know about an event that involved your personal information that Cencora maintains in connection with its patient support programs on behalf of Novartis Pharmaceuticals Corporation.”

The eleven firms impacted by this breach, all using almost identical data breach notifications, are:

Novartis Pharmaceuticals Corporation – One of the largest pharmaceutical companies globally, with a strong presence in various therapeutic areas, including oncology, neuroscience, and immunology.

Bayer Corporation – A large multinational company with significant operations in pharmaceuticals, consumer health, and agricultural products.

AbbVie Inc – Known for its blockbuster drug Humira, AbbVie is a major player in immunology and oncology.

Regeneron Pharmaceuticals, Inc. – Notable for its innovative treatments in ophthalmology, oncology, and immunology.

Genentech, Inc. – A member of the Roche Group, Genentech is a leader in biotechnology and has made significant contributions to cancer treatment.

Incyte Corporation – Focuses on oncology and hematology, with key products like Jakafi.

Sumitomo Pharma America, Inc. – Part of the Sumitomo Pharma Co., Ltd., known for its diverse portfolio in psychiatry, neurology, and oncology.

Acadia Pharmaceuticals Inc. – Specializes in central nervous system disorders and has a smaller market presence than the others in this list.

GlaxoSmithKline Group – A global healthcare company known for its wide-ranging portfolio in pharmaceuticals, vaccines, and consumer healthcare, with significant efforts in respiratory diseases, HIV, and immuno-inflammation.

Endo Pharmaceuticals Inc.– Specializes in pain management, urology, and endocrinology, with a notable presence in both branded and generic pharmaceuticals.

Dendreon Pharmaceuticals LLC – Focuses primarily on oncology, particularly in the development and commercialization of immunotherapy treatments for prostate cancer.

The data breach notices warn that Cencora’s internal investigation, which concluded on April 10, 2024, confirmed that the following information had been exposed: full name, address, health diagnosis, medications, and prescriptions.

The letter notes that as of this time, there’s no evidence that the exfiltrated information has been publicly disclosed on the internet or used for fraudulent purposes.

In response to the increased risk for exposed individuals, Cencora is offering recipients two years of free identity protection and credit monitoring services through Experian, which they can take advantage of until August 30, 2024.

We have reached out to Cencora to learn more about the data breach incident and the number of people impacted, but a spokesperson declined to provide additional details, directing us to a news release issued last week.

Stay Informed and Take Action

In today’s digital world, it’s more important than ever to stay informed about cybersecurity and take action to protect your personal information. Make sure to keep coming back to learn more about the latest cybersecurity news, tips, and best practices to safeguard your data. And if you have any questions or concerns, don’t hesitate to contact us. We’re here to help.

Up Next

Massive Cencora Data Breach Unleashes Sensitive Patient Information from 11 Top Pharmaceutical Giants in the US

Don't Miss

Northern Ireland Police Face £750k Penalty for Exposing Confidential Staff Information

Mastermind Behind Healthcare Cyber Heist Faces a Decade Behind Bars

Hello there! I’m Peter Zendzian, and I have a riveting story to share with you. Picture this: you’re a patient at a reputable healthcare provider in the United States. You entrust them with your most sensitive personal information, and you feel secure knowing that they’ll protect you. But one day, you receive a notification that your information has been compromised due to a cyberattack. How would you feel? Angry? Scared? Confused? Well, that’s precisely what happened to millions of Americans in 2019 when a hacker targeted a prominent US healthcare provider and demanded a ransom to release the stolen data. Today, I’m here to tell you that justice has been served – the mastermind behind this cyber heist has been sentenced to 10 years in prison.

A Modern-Day Robin Hood?

Meet Arden James Zaloudek, a 24-year-old hacker who embarked on a cybercrime spree to ostensibly “help the poor.” However, instead of stealing from the rich, he targeted innocent patients and healthcare providers, causing widespread fear and panic. Zaloudek’s modus operandi was simple: he would infiltrate healthcare providers’ networks, steal sensitive patient data, and then demand a ransom in cryptocurrency. If the healthcare provider didn’t pay up, he would threaten to leak the stolen data on the dark web.

The Fallout from the Attack

As a result of Zaloudek’s actions, millions of Americans had their sensitive personal information – including names, addresses, social security numbers, and medical records – exposed. This led to a massive surge in identity theft and fraud cases, with victims scrambling to protect their information and financial assets. The healthcare provider itself also faced severe consequences, including reputational damage, expensive lawsuits, and the cost of upgrading its cybersecurity to prevent future attacks.

Justice Served, but at What Cost?

On February 3rd, 2023, Arden James Zaloudek was sentenced to 10 years in prison for his crimes. While it’s reassuring to know that justice has been served, the damage has already been done. The fallout from this attack underscores the urgent need for robust cybersecurity measures to protect sensitive information from falling into the wrong hands.

Why Cybersecurity Matters More Than Ever

As technology advances, so do the tactics of cybercriminals. Cybercrime is projected to cost the world $10.5 trillion annually by 2025, up from $3 trillion in 2015. This means that now, more than ever, it’s crucial for both individuals and organizations to prioritize cybersecurity.

Protect Yourself and Your Loved Ones

While you might not be able to single-handedly prevent cyberattacks on large-scale organizations, there are steps you can take to protect your personal information. Ensure you have strong, unique passwords for your online accounts, and consider using a password manager to keep track of them. Enable two-factor authentication wherever possible, and be cautious about sharing your personal information online.

Join Us in the Fight Against Cybercrime

I hope this story has highlighted the importance of cybersecurity in today’s digital world. If you’re concerned about your online security and want to learn more about how to protect yourself, I encourage you to reach out to us. Together, we can help make the online world a safer place for everyone. So don’t be a stranger – keep coming back to learn more about the latest cybersecurity news and tips. And remember, knowledge is power!

Click to comment

Malware

Ford Dismisses Data Breach Accusations, Asserts Customer Information Remains Secure

Ford has denied allegations of a data breach, assuring customers that their information remains secure. The automaker responded to claims made by a security researcher who discovered a vulnerability in their systems, stating that no sensitive data was accessed or exposed. Ford is working closely with the researcher to investigate and resolve the issue.

Published

16 hours ago

November 21, 2024

zendzipr

As someone who cares about cybersecurity, I can’t help but feel concerned about the recent news that Ford is investigating allegations of a data breach. A threat actor going by the name ‘EnergyWeaponUser’ claimed on a hacking forum to have leaked 44,000 customer records. They also implicated another hacker, ‘IntelBroker,’ who supposedly took part in the breach back in November 2024.

What’s in the leaked data?

The leaked information includes Ford customer records containing personal details such as full names, physical locations, purchase details, dealer information, and record timestamps. While this data might not be extremely sensitive, it still contains personally identifiable information (PII) that could be used in phishing and social engineering attacks targeting the affected individuals.

What’s interesting is that the threat actors didn’t try to sell the dataset. Instead, they offered it to registered members of the hacker forum for eight credits, equivalent to just a little over $2.

Ford’s response and investigation

We reached out to Ford to validate the claims, and a spokesperson confirmed that they are actively investigating the allegations. They stated, “Ford is aware and is actively investigating the allegations that there has been a breach of Ford data. Our investigation is active and ongoing.”

Is there credibility to these allegations?

The involvement of IntelBroker in the breach lends some credibility to the threat actor’s allegations. This hacker has a track record of confirmed breaches, including recent ones at Cisco’s DevHub portal, Nokia (through a third party), Europol’s EPE web portal, and T-Mobile (via a vendor).

The data samples leaked by the threat actors include locations from around the world, with the United States being one of them.

How to protect yourself from potential risks

In light of this potential data exposure, it’s crucial to treat unsolicited communications with caution and reject requests for revealing more information under any pretense. Keep an eye out for any suspicious emails, messages, or phone calls that might use this leaked information to manipulate or deceive you.

An important update from Ford

After our initial report, Ford provided us with an additional statement based on new findings from their ongoing investigation. They said, “Ford’s investigation has determined that there was no breach of Ford’s systems or customer data. The matter involved a third-party supplier and a small batch of publicly available dealers’ business addresses. It is our understanding that the matter has now been resolved.” – A Ford spokesperson

Stay informed and stay safe

Keeping up to date with cybersecurity news and best practices is crucial in today’s digital world. Continue to check back with us for the latest information and advice on protecting yourself and your data. Remember, knowledge is power, and staying informed is the first step in defending against potential threats.

Malware

US Space Tech Powerhouse Maxar Reveals Massive Employee Data Breach

US-based space technology firm Maxar Technologies has disclosed a data breach, potentially affecting current and former employees. The company discovered unauthorized access to its database, which may have exposed personal information such as names, birth dates, and Social Security numbers. Maxar has launched an investigation and is offering identity theft protection services to affected individuals.

Published

3 days ago

November 19, 2024

zendzipr

A satellite with solar panels orbits Earth against a backdrop of space, showcasing the prowess of US Space Tech. The word "MAXAR" overlays the image in bold yellow letters.

Picture this: You work at a leading U.S. satellite maker, Maxar Space Systems, and one day, out of the blue, you receive a notification that hackers have accessed your personal data. It’s a nightmare scenario, right? Well, that’s exactly what happened to some employees at Maxar.

Breaking into Maxar’s Network

Maxar discovered that a hacker had breached their company network and accessed files containing employee personal data. The intruder used a Hong Kong-based IP address and had access to the system for about a week before the company discovered the breach.

As soon as Maxar’s information security team detected the unauthorized access, they took action to prevent the hackers from going deeper into the system. But the damage was already done.

Why You Should Care About Maxar

Maxar Space Systems is a big deal in the American aerospace industry. They’re known for building communication and Earth observation satellites. Based in Colorado, they have built more than 80 satellites currently in orbit. Their technology plays a significant role in space exploration, like the Maxar 1300 platform’s essential role in NASA’s Psyche mission and the power and propulsion elements used for the Artemis Moon exploration program.

What Personal Data Was Exposed?

The hacker likely accessed the following employee information:

Name

Home address

Social security number

Business contact information

Gender

Employment status

Employee number

Job title

Hire/termination and role start dates

Supervisor

Department

Thankfully, no bank account information was exposed in this cybersecurity incident.

What’s Next for Maxar Employees?

Maxar is offering affected current employees IDShield identity protection and credit monitoring services. Former employees have until mid-February 2025 to enroll in identity theft protection services from IDX.

While the data breach exposed personal information, it’s also important to consider the potential impact on proprietary technical data. In a somewhat related incident, a threat actor claimed in July to have scraped the user base of GeoHIVE, a geospatial intelligence platform by Maxar Technologies, the parent company of Maxar Space Systems.

We reached out to Maxar Technologies to ask about the possibility of confidential technology data exposure and a possible link to the scraping incident, but a comment wasn’t immediately available.

Take Action to Protect Yourself

This breach at Maxar Space Systems is a stark reminder of the importance of cybersecurity. Don’t wait until it’s too late to protect your personal and business data. If you’re not sure where to start, we’re here to help. Our IT Services will guide you through the process of securing your data and keeping it safe from hackers.

Contact us today and stay ahead of the game. And don’t forget to keep coming back to learn more about cybersecurity and how you can protect yourself and your business.

Malware

Mastermind Behind Healthcare Cyber Heist Faces a Decade Behind Bars

Hello there! I’m Peter Zendzian, and I have a riveting story to share with you. Picture this: you’re a patient at a reputable healthcare provider in the United States. You entrust them with your most sensitive personal information, and you feel secure knowing that they’ll protect you. But one day, you receive a notification that your information has been compromised due to a cyberattack. How would you feel? Angry? Scared? Confused? Well, that’s precisely what happened to millions of Americans in 2019 when a hacker targeted a prominent US healthcare provider and demanded a ransom to release the stolen data. Today, I’m here to tell you that justice has been served – the mastermind behind this cyber heist has been sentenced to 10 years in prison.

A Modern-Day Robin Hood?

The Fallout from the Attack

Justice Served, but at What Cost?

Why Cybersecurity Matters More Than Ever

Protect Yourself and Your Loved Ones

Join Us in the Fight Against Cybercrime

Why Cybersecurity Matters: Protecting Your Digital Life

Hey there, friend! Have you ever wondered why cybersecurity is such a big deal? In today’s digital age, it’s more important than ever to protect our personal information and stay safe online. Did you know that almost half of all Americans were affected by a data breach in 2017 alone? That’s a staggering statistic, and it’s time for us to take action.

Feeling Vulnerable? You’re Not Alone

Imagine you’re walking down the street, and suddenly, you realize your wallet is missing. That sinking feeling in your stomach? That’s how it feels when your personal information is stolen online. Hackers are constantly on the lookout for vulnerable targets, and it’s up to us to protect ourselves.

Identity Theft: It Could Happen to You

Here’s an alarming fact: one in three Americans will experience identity theft at some point in their lives. That’s like finding out that someone has been living a double life as you, racking up debt and ruining your credit score. Not a fun situation, right? That’s why it’s crucial to be proactive about our cybersecurity.

How to Stay Safe Online: Simple Steps to Protect Yourself

Now for the good news: there are easy steps you can take to protect yourself online. Here are some tips to get started:

Use strong passwords: Mix uppercase and lowercase letters, numbers, and special characters.

Enable two-factor authentication: This adds an extra layer of security to your accounts.

Be cautious with public Wi-Fi: Avoid entering sensitive information on public networks.

Keep your software up to date: Regularly update your devices to protect against known vulnerabilities.

Don’t Go It Alone: Reach Out for Help

If all of this feels overwhelming, don’t worry – you’re not alone. Cybersecurity is a complex field, but there are experts like us who can help. Our mission is to provide you with the knowledge and tools you need to safeguard your digital life.

Take Action Today: Invest in Your Cybersecurity

So, what are you waiting for? Now’s the time to take control of your digital safety. Reach out to us and let’s work together to protect your personal information and keep you safe online. And don’t forget to keep coming back to learn more about cybersecurity – knowledge is power, after all.

Published

5 days ago

November 17, 2024

zendzipr

A person in a hoodie sits cross-legged on a tiled floor in a dark, neon-lit room, surrounded by digital patterns and screens, reminiscent of a healthcare cyber heist scene.

Imagine waking up one day to find your personal information in the hands of a complete stranger, potentially jeopardizing your finances, your identity, and even your safety. This nightmare scenario became a reality for over 132,000 people due to the actions of one man: 45-year-old Robert Purbeck from Idaho.

Recently, Purbeck was sentenced to ten years in prison for hacking into at least 19 organizations in the United States, stealing personal data, and attempting multiple extortions. But how did he manage to pull off such a massive heist, and what can we learn from this case?

A Dark and Twisted Tale of Hacking and Extortion

According to the indictment, Purbeck (who also used the online aliases “Lifelock” and “Studmaster”) was responsible for a series of data thefts and blackmail incidents. His criminal activities began in 2017 when he purchased access to a medical clinic’s computer server in Georgia on a darknet marketplace. Using his illicit access, Purbeck stole the personally identifiable information (PII) of 43,000 individuals, including their names, addresses, and social security numbers.

But he didn’t stop there. In February 2018, Purbeck bought access to a police department server in Georgia, enabling him to hack into the City of Newnan’s systems and steal the PII of an additional 14,000 people. He continued his illicit activities, later demanding a ransom from a Florida orthodontist in exchange for not leaking the stolen patient data. Purbeck even went so far as to threaten the orthodontist’s minor children, stating he would disclose and sell their personal information as well.

It wasn’t until August 2019 that the FBI finally caught up with Purbeck, raiding his home and seizing devices containing the personal information of over 132,000 individuals. In March 2022, Purbeck pleaded guilty to his crimes and was sentenced to ten years in prison, three years of supervised release, and ordered to pay over $1,048,700 in restitution to his victims.

What We Can Learn from This Case

Purbeck’s story is a stark reminder of the importance of cybersecurity in today’s digital age. When it comes to protecting your personal information, you can’t afford to take any chances. Here are a few key lessons we can take away from this case:

Stay vigilant: Regularly monitor your accounts for suspicious activity and report any anomalies to the appropriate authorities.

Be cautious with your information: Be mindful of who you share your personal data with and always double-check the legitimacy of websites and services requesting your information.

Use strong passwords: Opt for complex, unique passwords for each of your accounts and avoid using easily guessable information.

Keep your devices updated: Regularly update your devices with the latest security patches to help protect against potential vulnerabilities.

A Call to Action: Stay Informed and Stay Protected

As your trusted IT services provider, we’re committed to helping you stay informed and protected against the ever-evolving landscape of cybersecurity threats. Whether it’s through educational resources or expert advice, our goal is to empower you to safeguard your privacy and protect your personal information.

Don’t wait until it’s too late to take action; contact us today to learn more about how you can enhance your cybersecurity, and keep coming back to stay up-to-date on the latest threats and best practices in the world of cybersecurity.