Oh ugh, Wednesday edition:
Daixin Team has leaked Communicare in Kentucky -- a behavioral health community center. Not a huge breach, but a lot of sensitive mental health records as well as employee records, mental illness warrants, etc. A lot of the data appears to be from 2015-2017, scanned pdf files.
#databreach #ransomware #healthsec #HIPAA #cybersecurity #DaixinTeam
Acadian Ambulance hit by #ransomware attack; #DaixinTeam claims info on 10 million patients stolen:
On May 8, I posted a link to a news article about an attack on Regional Cancer Center in India that had been attributed by the victim to Daixin Team.
Yesterday, Daixin Team responded to my inquiry at the time by saying that no, that is not one of their attacks, and a North Korean team is just imitating them.
In the aftermath of a recent cyberattack against a leading international hotel chain by a known extortion gang, what lessons can be learned about how to better secure guests’ data and establish effective remediation processes?
3.5 million Omni Hotel guest details held to ransom by Daixin Team.
Read more in my article on the Exponential-e blog: https://www.exponential-e.com/blog/3-5-million-omni-hotel-guest-details-held-to-ransom-by-daixin-team
Lots of useful #CTI published recently that maps to #mitreattack #TTPs. HHS report on #Venus yesterday is the latest on #ransomware threats to US #healthcare #HPH orgs this year: https://www.hhs.gov/sites/default/files/venus-ransomware-analyst-note.pdf
Also #Maui, #Zeppelin, #DaixinTeam, & #Quantum. I tossed these all into one heatmap (60 techniques total) to show overlap areas and set up pivoting to related defenses: https://app.tidalcyber.com/share/09809998-6c73-4208-a507-8c1ca1b311e9
Dissent Doe 
dispatch
ITSEC News
Graham Cluley
iCyberFighter
TropChaud