Weekly Cybersecurity Recap December 29

  • By Steven
  • Published: Dec 29, 2023
  • Last Updated: Dec 30, 2023

This week caps off our year of cyber breaches; in this week alone, we saw millions of records stolen, targeted health providers, mortgage servicers crumble, and the return of a year-old breach. ESO Solutions made the news first, reporting 2.7 million patient records stolen from their emergency response software. HealthEC was featured in our reporting soon after, announcing a 112k record data breach from their health analytics platform. Welltok’s MOVEit event also appeared, continuing the consequences of the global incident. Fidelity’s LoanCare appeared in the latter half of the week—announcing a 1.3 million borrower breach. Finally, National Amusements, the parent company of Paramount and CBS, announced a data breach impacting 82k—but it happened over a year ago. Find more about each breach below.

ESO Solutions Inc.

ESO Solutions is a developer and analytics solution for emergency services; they connect agencies, fire departments, hospitals, and state response offices. The information they collect comes from various sources, including patients. The data’s 2.7 million leaked records involve names, Social Security Numbers (SSNs), phone numbers, residential addresses, diagnosis and treatment data, insurance and medical record numbers, and claims payer information. Those exposed to this breach must act immediately to protect their identity and medical accounts.

HealthEC LLC.

HealthEC compiles information about patients using AI-assisted technology. The collected data provides the patient with the best options for their situation and availabilities. The data stolen in this event includes over 18 medical providers. The data exposed in this event differs between individuals and organizations; it includes patient names, addresses, birthdays, SSNs, taxpayer IDs, medical records, medical information, health insurance details, and billing information. Although the current impact figure sits around 112k, this number comes from the Maine Attorney General’s office and is subject to change. 

Welltok: EmblemHealth, OSF HealthCare System, Yale New Haven Health

It wouldn’t be a week in cybersecurity breaches without a MOVEit entry; Welltok appeared again in the news, with three more entities impacted by the MOVEit event. In May, MOVEit announced a zero-day vulnerability allowing cybercriminals into their clients’ systems. Welltok is a health and wellness vendor that uses MOVEit, and other organizations subsequently use them. The stolen data in this breach differs between patients and institutions. However, it most commonly includes names, dates of birth, treatment information, health insurance data, provider names, and some cases of SSNs. Nearly 2 million patients have had their data compromised in this event. 

LoanCare, LLC. 

LoanCare is a Fidelity National Financial sub-servicing solution. They assist providers and homeowners with finance and data functions. LoanCare reported suspicious activity to Fidelity, prompting both entities to launch security defenses. Both systems shut down, but the assailants still obtained an estimated 1.3 million data records. The information belongs to LoanCare borrowers, including names, SSNs, addresses, and loan numbers. Investigations may result in a higher impact figure overall if the assailants accessed the files of other sub-servicers through Fidelity’s systems. Victims at risk due to this breach must invest in identity, financial, and account monitoring services; these will alert the data owner to suspicious activity as soon as it happens.

National Amusements

The parent company of CBS and Paramount, National Amusements’ breach happened a year ago, around December 15th, 2022. The assailants stole the data of 82k people, including their names, financial account details, credit and debit card numbers, and associated permissions. The public has only just learned of the breach because of NA’s intensive threat response; consequently, those exposed to this breach must react immediately.

About the Author
IDStrong Logo

Related Articles

Instagram Vulnerability Allowed Hackers Access to Control Your Phone

Security experts Check Point Research discovered a critical vulnerability while examining Instagra ... Read More

Alien Malware Infects More than 226 Mobile Apps and Steals Bank Data

As reported on September 24, 2020, by ZDNet and ThreatPost, a new strain of malware named “A ... Read More

Universal Health Systems Hit by Ransomware Attack

Universal Health Systems (UHS), a Fortune 500 company owning more than 400 hospitals across the co ... Read More

Exchange Server Bug Exposes a Big Risk to Hackers

Months after Microsoft released a patch to fix a serious flaw in MS Exchange Server, more than 61% ... Read More

Clients’ Bank Data Exposed in Blackbaud Ransomware Attack

Blackbaud software was victim to a ransomware attack last May, and new information suggests that c ... Read More

Latest Articles

What to Do if Your Credit Card is Lost or Stolen

What to Do if Your Credit Card is Lost or Stolen

Credit and debit cards have become the most prominent form of wealth access in the last decade. Once consumers pulled out thick wallets of cash—they now pull out thin clips of cards—if they bother using a card, not a watch or cellphone.

Credit Card CVV Number: Meaning and Security

Credit Card CVV Number: Meaning and Security

Inspect your credit card, and you'll likely find interesting—and crucial—elements of the plastic rectangle. The front might display the provider's name, a chip, some digits, or an entire card number; the back might hold much the same, along with a signature, when necessary, and a "valid thru [sic]" date.

The Meaning of Two-Factor Authentication (2FA): How to Turn On and Turn Off

The Meaning of Two-Factor Authentication (2FA): How to Turn On and Turn Off

Cyber attacks are a growing threat to all industries, nations, and people. They occur with increasing frequency, with the last year reporting 3,205 data compromises and over $12.5 billion in projected losses, according to the Federal Bureau of Investigation (FBI).

Featured Articles

How to Buy a House with Bad Credit

How to Buy a House with Bad Credit

Buying your own home is the American Dream, but it might seem out of reach to those with bad credit. However, the good news is, if your credit is less than perfect, you do still have options and in most cases, can still buy a home.

How Secure Is Your Password? Tips to Improve Your Password Security

How Secure Is Your Password? Tips to Improve Your Password Security

Any good IT article on computers and network security will address the importance of strong, secure passwords. However, the challenge of good passwords is that most people have a hard time remembering them, so they use simple or obvious ones that pose a security risk.

Top 10 Senior Scams and How to Prevent Them

Top 10 Senior Scams and How to Prevent Them

Senior scams are becoming a major epidemic for two reasons. First, seniors often have a lot of money in the bank from a life of working hard and saving.

Free Identity Exposure Scan
Instantly and Securely Check if Your Personal Information is Exposed on the Dark Web or Sold by Data Brokers
Please enter first name
Please enter last name
Please select a state
Close
Free Identity Threat Scan
Instantly Check if Your Personal Information is Exposed
All fields below are required
Please enter first name
Please enter last name
Please enter a city
Please select a state
Please enter an age
Please enter an email address
Close