Cybersafetyconnections October 7th, 2024, vol #189 

  • From Konbriefing there was a data breach at I-MED, Australia’s largest medical imaging provider. 
  • Patients’ data was affected. 
  • Why this happened was because of stolen login credentials found online. 
  • No cybercriminal group has claimed responsibility for the attack. 
  • How I-MED mitigated loss from the data breach is stated below. 

What happened? 

Designer on Copilot powered by DALL-E3    

From Crikey.com I-MED, Australia’s largest medical imaging provider, experienced a data breach. 

Who was impacted? 

I-MED 

The breach exposed sensitive health and personal information of tens of thousands of patients and included access to medical reports, scan images, names, addresses, and other details stored in I-MED’s internal systems. 

The breach potentially exposed the data of tens of thousands of patients, with access going back to 2006. 

Why did this happen? 

Designer on Copilot powered by DALL-E3    

An intruder gained access to the system using login credentials that had been posted online for a year. 

The breach involved a common form of cyberattack known as “credential stuffing,” where leaked usernames and passwords from one service are used to access other services.  

The intruder accessed data for St Vincent’s Public Hospital, a cancer clinic in Sydney, and an Australian radiologist using login details found online. 

Which cybercriminal group claimed responsibility? 

From the information gleaned, it was reported that an “intruder” did it. 

How did I-MED mitigate loss from the cyberattack? 

OWASP Threat and Safeguard Matrix 

After becoming aware of the issue, I-MED took immediate action to:

  •  disable the external accounts and contacted impacted users. However, the company did not disclose the number of affected patients. 
  • I-MED confirmed that fewer than 10 accounts had been leaked online and stated that its preliminary investigations did not indicate significant unusual access to patient records.  
  • However, the leaked accounts had weak security measures, including short passwords and no two-factor authentication. 
  •  In addition to the data breach, I-MED faced privacy concerns over its partnership with harrison.ai, a health AI company, and its use of patient data without explicit consent.  
  • Despite these controversies, I-MED has been reluctant to address questions about its partnership with harrison.ai. 

Here Copilot explains how I-MED can mitigate loss from the data breach. 

To mitigate losses from a data breach, I-MED can implement several strategies: 

  • Enhanced Security Measures: Strengthen cybersecurity protocols by using advanced encryption, multi-factor authentication, and regular security audits to protect sensitive data. 
  • Employee Training: Conduct regular training sessions to educate employees about data security best practices and how to recognize phishing attempts and other cyber threats. 
  • Incident Response Plan: Develop and maintain a comprehensive incident response plan to quickly address and contain breaches, minimizing damage and recovery time. 
  • Data Minimization: Limit the amount of sensitive data collected and stored to reduce the potential impact of a breach. 
  • Regular Audits and Compliance: Ensure compliance with relevant regulations and conduct regular audits to identify and address vulnerabilities. 
  • Patient Communication: Establish clear communication channels to inform patients about data breaches promptly and transparently, offering support and guidance on protecting their information. 
  • Third-Party Risk Management: Assess and monitor the security practices of third-party vendors to ensure they meet the same security standards. 

Conclusion 

By implementing these measures, I-MED can better protect patient data and mitigate the impact of any potential data breaches123. 

Subscribe to get the latest blog post.