{"id":3503,"date":"2021-07-28T12:37:25","date_gmt":"2021-07-28T16:37:25","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3503"},"modified":"2021-07-28T12:37:25","modified_gmt":"2021-07-28T16:37:25","slug":"uc-san-diego-health-phishing-attack-exposes-medical-data","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/","title":{"rendered":"UC San Diego Health Phishing Attack Exposes Medical Data"},"content":{"rendered":"

\"UC<\/p>\n

UC San Diego Health, the academic health system of the University of California, recently disclosed suffering from a phishing attack that resulted in a data breach. <\/i><\/b>Bleeping Computer<\/i><\/b><\/a><\/span> broke this story.\u00a0<\/i><\/b><\/p>\n

The phishing attack breached employee\u2019s emails, compromising some email accounts and allowing the hackers potential access to the personally identifying information of patients, employees, and students between December 2, 2020, and April 8, 2021.\u00a0<\/span><\/p>\n

The information potentially at risk includes full name, address, date of birth, email, claims information, medical diagnosis and conditions, Medical Record Number, Social Security number, government identification number, payment card number or financial account number, and security code. It remains unclear how many people may have been affected by the phishing attack, or what the fallout might be. <\/span>Other researchers<\/a><\/strong><\/span> have documented that health and medical data sells for higher rates on the Dark Web than credit card numbers.\u00a0<\/span><\/p>\n

UC San Diego Health is ranked as one of the best hospitals in the United States. The organization has closed the unauthorized access and is investigating the incident with the help of third-party researchers.\u00a0<\/span><\/p>\n

The prominence of this target and the depth of potentially stolen information prompted cybersecurity<\/a><\/strong><\/span> experts to share their thoughts. Here\u2019s what they had to say.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

UC San Diego Health Phishing Attack Exposes Medical Data<\/b><\/h2>\n

Gary Ogasawara<\/b><\/h3>\n

Gary Ogasawara is CTO of <\/span><\/i>Cloudian<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

While many organizations rely on perimeter security such as firewalls or educating employees against the dangers of phishing, these defenses can be easily breached by increasingly sophisticated attacks. A recent <\/span>survey <\/span><\/a>of ransomware victims found that phishing succeeded despite the fact that 54% of all respondents and 65% of those that reported it as the entry point had conducted anti-phishing training for employees. These statistics highlight the fact that perimeter security is not enough to withstand an attack<\/span>.<\/span><\/p>\n

Organizations need to move beyond such traditional defenses to protect their data. This includes encrypting data both in flight and at rest to keep cyber-criminals from reading it or making it public in any intelligible form. In addition, organizations should have an immutable (unchangeable) backup copy of their data which prevents such criminals from altering or deleting it and ensures the ability to recover the uninfected backup copy in the event of an attack, without paying ransom.<\/span><\/p>\n

<\/div><\/p>\n

James Carder<\/b><\/h3>\n

James Carder is CSO of LogRhythm<\/a>.<\/span><\/i><\/p>\n

\u201cAs we have witnessed throughout 2021, threat actors continue to exploit unsuspecting individuals t<\/span>o gain sensitive information. Medical records continue to be the highest value record being stolen due to how financially lucrative the personally identifiable information (PII) and protected health information (PHI) , which cannot be changed or updated like you can with a credit card number, is for attackers. UC San Diego patients whose information was accessed are now vulnerable to a number of attacks due to their sensitive PII and PHI data being breached, including various methods of credit, insurance, and payment fraud. They could also face extortion-based attacks threatening to disclose sensitive medical diagnosis or images if payments are not made. Additionally, it is conceivable that the medical state, diagnosis, or prescription information for high-profile patients could be of interest to nation-states, terrorist groups, or other threat actors looking to do physical harm.<\/span><\/p>\n

UC San Diego Health now needs to review their complete threat landscape and model the threat actors that would be interested in or targeting that landscape. They need to fully understand what has been exposed to the internet and what systems or infrastructure allows access, especially to sensitive information, with just a username and password. Moving forward, UC San Diego should also ensure they have multi-factor authentication in place, as it is a must-have in today\u2019s day and age and could prevent future breaches caused by compromised credentials.<\/span><\/p>\n

To help prevent incidents like this moving forward, security awareness programs are essential \u2014 especially programs that focus specifically on phishing awareness. Ensuring employees are comfortable with analyzing subject lines, sender addresses, etc. allows them to be a more active part of the security defense. No matter where an organization stores its data, real-time monitoring and clear visibility are crucial for rapidly detecting and neutralizing security threats. Given the current evolving threat landscape and increased focus on healthcare by cyber-criminals, companies must leverage authentication and access controls, and response capabilities, to ensure private documents will be safeguarded and patients remain protected.\u201d<\/span><\/p>\n

<\/div><\/p>\n

Purandar Das<\/b><\/h3>\n

Purandar Das, Co-founder and Chief Security Evangelist from <\/span><\/i>Sotero<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

\u201cI think it will be important to understand the specific nature of the breach. More importantly, it is too early to claim that the data has not been misused. In fact, it may be hard to quantify what the long-term impact of the stolen data on the individuals are. Also concerning is the beach was not identified based on sources other than organization. That fact alone may suggest that the stolen data may have been spotted in an illegal store front. Obviously, the hospital will be taking a hard look as to how the activity went undiscovered for an extended period of time. The learnings should be used to help other organizations prepare better.\u201d<\/span><\/p>\n

<\/div><\/p>\n

Casey Ellis<\/b><\/h3>\n

Casey Ellis is CTO and founder of <\/span><\/i>Bugcrowd<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

“In an effort to support patients and staff during the pandemic, the healthcare sector has had to quickly become more accessible and connected. This increased accessibility brings increased exposure to attackers, and any time new technologies are quickly implemented there will be exploitable vulnerabilities left behind. This, combined with the intense pressure on the healthcare sector, makes it a prime target for cybercriminals.\u00a0<\/span><\/p>\n

This breach is an example of the personal sensitive information that can be violated by outside attackers within healthcare organizations such as medical diagnosis and conditions, medical record numbers, prescription information, social security numbers, financial account information. With such incredibly sensitive data at stake to cyber attackers, healthcare organizations should fortify their security posture with a crowdsourced cybersecurity approach. This empowers healthcare professionals to assess and mitigate the risks associated with disparate data sources and infrastructure so that patients do not have to worry about the privacy of their data.\u00a0\u00a0<\/span><\/p>\n

As health needs continue to grow, healthcare providers need to continue to operate without security slowing them down, which is where Bugcrowd has seen great success engaging external security researchers via a bug bounty or vulnerability disclosure program (VDP) to help identify and disclose vulnerabilities before adversaries can exploit them. This allows healthcare networks to identify security issues before the adversary does, protect their users, and avoid a breach like this one.\u201d\u00a0<\/span><\/p>\n

<\/div><\/p>\n

Thanks to the cybersecurity experts for their time and expertise on the UC San Diego Health phishing attack. For more, check out the SIEM Buyer\u2019s Guide<\/a><\/strong><\/span>.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

UC San Diego Health, the academic health system of the University of California, recently disclosed suffering from a phishing attack that resulted in a data breach. Bleeping Computer broke this story.\u00a0 The phishing attack breached employee\u2019s emails, compromising some email accounts and allowing the hackers potential access to the personally identifying information of patients, employees, […]<\/p>\n","protected":false},"author":41,"featured_media":2930,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,1621,1620,95,338,145,112,86,36,1183,21,57,22,1519,1619],"acf":[],"yoast_head":"\nUC San Diego Health Phishing Attack Exposes Medical Data<\/title>\n<meta name=\"description\" content=\"UC San Diego Health, the academic health system of the University of California, recently disclosed suffering a phishing attack and breach.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UC San Diego Health Phishing Attack Exposes Medical Data\" \/>\n<meta property=\"og:description\" content=\"UC San Diego Health, the academic health system of the University of California, recently disclosed suffering a phishing attack and breach.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-28T16:37:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/\",\"name\":\"UC San Diego Health Phishing Attack Exposes Medical Data\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg\",\"datePublished\":\"2021-07-28T16:37:25+00:00\",\"dateModified\":\"2021-07-28T16:37:25+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"UC San Diego Health, the academic health system of the University of California, recently disclosed suffering a phishing attack and breach.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg\",\"width\":800,\"height\":400,\"caption\":\"UC San Diego Health Phishing Attack Exposes Medical Data\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UC San Diego Health Phishing Attack Exposes Medical Data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UC San Diego Health Phishing Attack Exposes Medical Data","description":"UC San Diego Health, the academic health system of the University of California, recently disclosed suffering a phishing attack and breach.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/","og_locale":"en_US","og_type":"article","og_title":"UC San Diego Health Phishing Attack Exposes Medical Data","og_description":"UC San Diego Health, the academic health system of the University of California, recently disclosed suffering a phishing attack and breach.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2021-07-28T16:37:25+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/","name":"UC San Diego Health Phishing Attack Exposes Medical Data","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg","datePublished":"2021-07-28T16:37:25+00:00","dateModified":"2021-07-28T16:37:25+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"UC San Diego Health, the academic health system of the University of California, recently disclosed suffering a phishing attack and breach.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/stock-market-mod-2.jpg","width":800,"height":400,"caption":"UC San Diego Health Phishing Attack Exposes Medical Data"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/uc-san-diego-health-phishing-attack-exposes-medical-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"UC San Diego Health Phishing Attack Exposes Medical Data"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3503"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3503"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3503\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2930"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}