Hackers stole $7.5 million from the Department of Health and Human Services’ (HHS) grant payment system via cyberattacks, including spear-phishing incidents, in 2023. The scams targeted the Payment Management Services system, which handles civilian grant payments, with funds meant for five accounts, including for rural communities and underserved patients. The HHS Office of Inspector General has been notified, but the theft has delayed payments to grant recipients, such as the HHS’ Health Resources and Services Administration.

ISC Stormcast For Monday, November 17th, 2025 https://isc.sans.edu/podcastdetail/9702
ISC Stormcast For Monday, November 17th, 2025 (Mon, Nov 17th)

