{"id":18668,"date":"2022-03-04T03:27:18","date_gmt":"2022-03-04T03:27:18","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/03\/04\/patient-records-exposed-in-data-breach-at-michigan-medicine\/"},"modified":"2022-03-04T03:27:18","modified_gmt":"2022-03-04T03:27:18","slug":"patient-records-exposed-in-data-breach-at-michigan-medicine","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/03\/04\/patient-records-exposed-in-data-breach-at-michigan-medicine\/","title":{"rendered":"Patient records exposed in data breach at Michigan Medicine"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

The data of thousands of patients is believed to have been exposed following a data breach at\u00a0Michigan Medicine.<\/p>\n

The data breach started with an employee email account compromised on Dec. 23. The attacker used the account to obtain information and send phishing emails. However, the employee did not notice the account being taken over until Jan. 6, when the incident was reported to Michigan Medicine\u2019s technology department.<\/p>\n

Michigan Medicine claims it has no evidence that the attack aimed to obtain patient health information, but data theft cannot be ruled out. At the least, all emails in the account are presumed to have been compromised.<\/p>\n

Details in the emails included\u00a0names, medical record numbers, addresses, dates of birth, diagnostic and treatment information, and health insurance information. The emails were job-related communication for the coordination and care of patients.<\/p>\n

Michigan Medicine said that they had placed \u201cadditional technical safeguards\u201d on their email system and infrastructure that supports it to prevent similar incidents from occurring again.<\/p>\n

\u201cPatient privacy is extremely important to us, and we take this matter very seriously,\u201d Jeanne Strickland, chief compliance officer of Michigan Medicine, said in a statement<\/a>.<\/p>\n

That may be a stretch, since it\u2019s not the first time recently when Michigan Medicine has had patient files compromised. The Detroit Free Press reported that a newly hired employee accessed patient records without a business need between Dec. 1 and Jan. 25. Some 269 patients were compromised in that case.<\/p>\n

\u201cThe use of a compromised legitimate email account is a gold mine for cybercriminals,\u201d Erich Kron, security awareness advocate at security awareness training company KnowBe4 Inc.<\/a>, told SiliconANGLE. \u201cOnce in an email account, the bad actors will often use the accounts to spread malware, issue fraudulent invoices to customers, demand funds transfers or steal information.\u201d<\/p>\n

Kron added that \u201cattacks from legitimate accounts are very effective because these bad actors will often continue previous email conversations with other people in earlier email chains, many email protections focus on email from external sources, and there is an automatic sense of trust when you receive an email from within your own organization.\u201d<\/p>\n

Photo: Michigan Medicine<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n