Watsonville Community Hospital still hasn’t notified all those affected by a November data breach; employees are reporting tax refund fraud:

https://databreaches.net/2025/03/21/watsonville-community-hospital-still-hasnt-notified-all-those-affected-by-a-november-data-breach-employees-are-reporting-tax-refund-fraud/

Health-care billing company Medical Billing Specialists Inc. (MBS Select) has been hit with a potential class action lawsuit over their 2024 breach.

Notifications first went out a year after the attack by Akira ransomware group.

https://databreaches.net/2025/02/26/medical-billing-vendor-sued-over-health-data-leak-gold-mine/

h/t, Bloomberg Law.

Direct link to complaint: https://www.bloomberglaw.com/public/desktop/document/MarianoGuerravMedicalBillingSpecialistsIncDocketNo125cv10453DMass?doc_id=X7V6GF8O0QV9EOAVLKEKKSJCO87

DISA Global Solutions reports more than 3.3 million people were affected by the 2024 data breach they experienced, but questions remain.

In an interim update that had been quoted by a law firm,, DISA had made an intriguing statement about steps they had taken to dissuade the unnamed threat actor from leaking the data and providing confirmation of deletion.

That's all missing from their final notification.

Why?

https://databreaches.net/2025/02/25/disa-global-solutions-reports-more-than-3-3-million-people-affected-by-2024-data-breach-but-questions-remain/

#databreach #ransom #extortion #transparency #notification

@campuscodi

Another day, another leak, another inaccurate claim by an entity, and another inappropriate attack on a researcher. Buckle up.

@JayeLTee had alerted me to his nasty encounter with TeammateApp's CEO. See his post https://infosec.exchange/@JayeLTee/114057470165488882 and his substack at https://jltee.substack.com/p/new-zealand-companys-impossible-to-hack-security

My report/commentary is at :

No need to hack when it’s leaking, Monday edition: TeammateApp:
https://databreaches.net/2025/02/24/no-need-to-hack-when-its-leaking-monday-edition-teammateapp/

@zackwhittaker @SchizoDuckie

Beverly Hills Plastic Surgeon Jaime Schwartz M.D. Sued for Not Timely Notifying Patients of Two Hacks: https://databreaches.net/2025/02/22/beverly-hills-plastic-surgeon-jaime-schwartz-m-d-sued-for-not-timely-notifying-patients-of-two-hacks/

h/t, #404media #Courtwatch

HCF Management healthcare facilities hit by ransomware attack; more than 70,000 patients affected:

https://databreaches.net/2025/01/24/hcf-management-healthcare-facilities-hit-by-ransomware-attack-more-than-70000-patients-affected/

Whilst agitating my teabag, the water swooshed in such a way that it made the mastodon notification sound. I couldn't do that again if I tried.

Sharp-eyed @zackwhittaker caught this one:

UnitedHealth hid its Change Healthcare data breach notice for months:

https://techcrunch.com/2025/01/15/unitedhealth-hid-its-change-healthcare-data-breach-notice-for-months/

Let's make sure Zack's reporting gets indexed.

Anyone else think that the HHS OCR monetary penalty imposed on Solara Medical was too steep? $3M is one of the steepest monetary penalties HHS OCR has imposed.

I'm glad to see enforcement of the timely notification requirement, but so many entities have blown the risk assessment requirement and the 60 day notification regulations so why is Solara being hit with such a stiff penalty?

https://databreaches.net/2025/01/14/hhs-office-for-civil-rights-settles-hipaa-phishing-cybersecurity-investigation-with-solara-medical-supplies-llc-for-3000000/

Westend Dental agrees to pay Indiana $350K and to implement a corrective action plan to settle charges of multiple HIPAA violations.

This is one of THE WORST incident responses I have ever read and I've read a lot of bad ones over the years. But it's not just an incident response disaster. They were routinely violating HIPAA privacy and security rules.

Kudos to the state of Indiana for going after the dental practice and investigating to find out all the problems.

Don't ask me what HHS OCR did, because I don't think they were ever even told about this 2020 ransomware attack.

Read more here, where you will also find the court filings I've uploaded so you can read how bad this one was:

https://databreaches.net/2024/12/31/westend-dental-agrees-to-pay-indiana-350k-and-to-implement-corrective-action-plan-to-settle-charges-of-multiple-hipaa-violations/

#ransomware #compliance #HIPAA #healthsec #encryption #backup #PrivacyRule #SecurityRule #ransparency #disclosure #notification

@zackwhittaker @jgreig

One thing that Mastodon doesn't get a lot of credit for is the pop-up sound for new notifications on the web interface. The ba-bum pop sound is just right. It's gently pleasant, not the kind of notification sound that, oh say, is likely to inspire PTSD. (See Facebook Messenger, which I'm no longer on.) It's a functional Spartan sound that serves its purpose as opposed to something that is trying to hog your attention. The virtues of noncorporate open source.

rssToNtfy - Turning RSS feeds into push notifications via ntfy.sh
https://github.com/chunkystyles/rssToNtfy #push #notification #RSS #ntfy

@jkmcnk @avian še navodilo za nekoderje: ko se ti popup pokaže, namesto da ga klikneš, poskrolaš stran dol, da pod popupom ni slikce, potem pa z desnim klikom odpreš meni in izbereš Blokiraj element. Odpre se okence desno spodaj. V njem klikneš na vrstico, kjer piše "###notification-popup", potem pa na gumb Ustvari in evo, naklikal si si pravilo za blokiranje nadležneža!

Im #Wartezimmer beim #Arzt

Menschen mit #Maske weit in der Unterzahl

Jemand hat seine #Notification Töne am Handy nicht ausgeschaltet

Evergreen School District in Montana has reported a #databreach to the Montana AG's Office. The unauthorized access occurred and was detected on September 30 and notification was made October 18.

The types of info were name and SSN.

And yet, Evergreen's letter says they have no reason to believe there has been or will be fraud or misuse of info.

And that's based on..... what, exactly?

Their letter can be found at https://dojmt.gov/wp-content/uploads/Consumer-notification-letter-1776.pdf

Their report to the AG indicates that 373 Montanans were affected by the breach.

@douglevin @funnymonkey @brett

#Transports #Ferroviaire #Train #GrandeVitesse #Trenitalia #Notification #ART

Notification de Trenitalia d’un nouveau service envisagé sur Paris Marseille

https://www.autorite-transports.fr/wp-content/uploads/2024/10/sflo2024-005.pdf