HHS dissed for poor cybersecurity, Iowa Health Group 1.4M patient breach, and BCG gets satisfaction against hacktivist




InfoSec ICU show

Summary: Brandon is back in the co-pilot’s chair as we talk about the recent GAO report that HHS is failing to protect PHI. We also share our intrigue surrounding the PHI breach at Iowa Health Group that was actually a Business Email Compromise attack. There’s also good news for Boston Childrens’ Hospital, as the hacktivist charged with disrupting their network in 2014 is convicted.<br> <a href="https://podcast.musc.edu/podcast/infosec/e36-infosecicu/" target="_blank" rel="noopener">Show Notes</a><br> <br> Resources:<br> HHS puts PHI at risk<br> <a href="https://healthitsecurity.com/news/hhs-fails-to-fix-cybersecurity-vulnerabilities-putting-phi-at-risk" target="_blank" rel="noopener">https://healthitsecurity.com/news/hhs-fails-to-fix-cybersecurity-vulnerabilities-putting-phi-at-risk</a><br> Iowa Health Group hit with 1.4M patient record breach<br> <a href="https://www.databreachtoday.com/iowa-health-group-data-breach-hits-14-million-patients-a-11264" target="_blank" rel="noopener">https://www.databreachtoday.com/iowa-health-group-data-breach-hits-14-million-patients-a-11264</a><br> Boston Children’s Hospital Hacktivist is convicted<br> <a href="https://www.bankinfosecurity.com/boston-childrens-hospital-ddos-attacker-convicted-a-11279" target="_blank" rel="noopener">https://www.bankinfosecurity.com/boston-childrens-hospital-ddos-attacker-convicted-a-11279</a><br> One Cool Things<br> Malwarebytes Browser Extension <br> <a href="https://www.bleepingcomputer.com/news/security/malwarebytes-browser-extension-blocks-malware-scams-ads-and-trackers/" target="_blank" rel="noopener">https://www.bleepingcomputer.com/news/security/malwarebytes-browser-extension-blocks-malware-scams-ads-and-trackers/</a> <br> Sir Patrick Stewart ready to engage his Star Trek fans again.<br> <a href="https://www.npr.org/2018/08/05/635809156/patrick-stewart-is-reprising-his-role-as-captain-picard-in-new-star-trek-series" target="_blank" rel="noopener">https://www.npr.org/2018/08/05/635809156/patrick-stewart-is-reprising-his-role-as-captain-picard-in-new-star-trek-series</a><br>  <br> Contact<br> Email <a href="mailto:infosecicu@musc.edu">infosecicu@musc.edu</a><br> Twitter:<br> <br> * <a href="https://twitter.com/Gerald_Auger" target="_blank" rel="noopener">Gerry Auger (@Gerald_Auger)</a><br> * <a href="https://twitter.com/sgcardinal" target="_blank" rel="noopener">Steven Cardinal (@sgcardinal)</a><br> <br>