Pharmacy Services Provider Attack Exposed Medical Data on Nearly Six Million Patients

Attacks through macros drop sharply, Dallas ransomware recovery will take weeks, NK hackers have stolen $721 million from Japan, DoD to adopt Defender, WhatsApp unveils ChatLock, much more

Check out my latest CSO column from Sleuthcon, which highlights how cybercriminals are pivoting their tactics under pressure from law enforcement and touches on some of the challenges defenders still face in coping with cybercrime.

Photo by Árpád Czapp on Unsplash

Pharmacy services provider PharMerica disclosed a massive data breach impacting over 5.8 million patients, exposing their medical data to hackers.

According to a data breach notification submitted to the Office of the Maine Attorney General, hackers breached PharMerica's system on March 12th, 2023, stealing the full names, addresses, dates of birth, social security numbers (SSNs), medications, and health insurance information of 5,815,591 people.

Although PharMerica does not mention the type of hacking incident, the Money Message ransomware gang claimed the attack on March 28th, 2023, when they began publishing stolen data. Money Message claimed to have stolen 4.7 TB of data during their attack on PharMerica, stating that it con…