- You can never take your network security too seriously
- A hacker claims to have 655,000 patient records obtained by hacking into three separate healthcare databases and is selling those patient records online
- Because medical information is sold on the black market for ten times more than the value of a credit card number – the healthcare industry is going to have a target on its back
- Here’s a list of the three healthcare databases that were breached.
The DeepDotWeb article quotes the hacker as providing this information about the databases:
- “A considerably large database (48,000 patient records) in plaintext from a healthcare organization in Farmington, Missouri. It was retrieved from a Microsoft Access database within their internal network using readily available plaintext usernames and passwords.”
- “A very large database (210,000 patients) in plaintext from a healthcare organization in the Central/Midwest U.S. It was retrieved from a severely misconfigured network using readily available plaintext usernames and passwords.”
- “A very large database (397,000 patients), in plaintext from a healthcare organization in the state of Georgia. It was retrieved from an accessible internal network using readily available plaintext usernames and passwords.”
