UnityPoint Health has suffered a second breach this year, with 1.4 million patient records potentially compromised during a phishing attack. The attack, which occurred between March 14 and April 3, targeted the health system’s business email system. The breach is believed to be financially motivated, and while EHR and billing systems were not impacted, the hacked accounts did contain protected health information, payment card details, and social security numbers. UnityPoint has taken measures to enhance cybersecurity, including resetting passwords and implementing multi-factor authentication.

Alleged Iranian hackers target victims in Saudi Arabia with new spying malware
Iran-based hacking group APT34 has launched a new cyber espionage operation, according to cybersecurity firm Trend Micro. The group has been infecting victims with the