Subj : Mobile medical service DocGo confirms it suffered a major cyberat
To   : All
From : TechnologyDaily
Date : Wed May 08 2024 16:45:05

Mobile medical service DocGo confirms it suffered a major cyberattack

Date:
Wed, 08 May 2024 15:32:56 +0000

Description:
Hackers stole sensitive health-related data from an undisclosed number of 
customers.

FULL STORY
======================================================================

On-demand medical transportation and telemedicine company DocGo has said it 
recently suffered a cyberattack which resulted in the theft of some 
sensitive, health-related data. 

In an 8-K form filed with the Securities and Exchange Commission (SEC), the 
company said it recently identified a cybersecurity incident involving 
certain parts of the companys systems. 

As soon as it spotted the attack, the company did the usual: launched an 
investigation, brought in external cybersecurity experts for analysis and 
forensics, and notified relevant authorities. Whether or not it was forced to 
shut down its systems, and thus disrupt its day-to-day operations, is unknown 
at this time. Ongoing investigation 

The subsequent investigation determined that the attackers did access, and 
exfiltrate, some information from the companys IT infrastructure, including 
certain protected health information from a limited number of healthcare 
records within the companys U.S.-based ambulance transportation business. 

So far, we dont know exactly what kind of health information was taken, or 
how many people are affected. DocGo did say that it started notifying the 
victims. 

Since the investigation is still ongoing, results may vary, but so far there 
is no evidence of other business units being affected by the breach, no 
evidence of the attackers still lingering on the network, no evidence of the 
stolen data being abused in the wild, and no evidence of the incident having 
a material impact on the company. 

Since hacking groups are yet to take responsibility for this attack, we dont 
know if this was a ransomware incident, or a simple data smash-and-grab. In 
recent times, ransomware operators have started abandoning the encryption 
part of the attack, and started focusing solely on data exfiltration. 
Apparently, developing, maintaining, and deploying an encryptor is too 
expensive and too cumbersome. Demanding money in exchange for the data seems 
lucrative enough. 

 Via BleepingComputer More from TechRadar Pro More companies are facing 
ransomware threats  but at least it now seems like they're doing something 
about it Here's a list of the best firewalls around today These are the best 
endpoint security tools right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/mobile-medical-service-docgo-confirms-i
t-suffered-a-major-cyberattack


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.