After refusing to pay a $1 million extortion demand, the Providence, Rhode Island, school district saw sensitive student information posted online by a ransomware gang. The data breach included sexual misconduct allegations and students’ special education records and vaccine histories. The school district previously reported that personal data of 12,000 current and former staff was compromised, but denied that student records were affected. However, the leaked files suggest otherwise, raising concerns about the school’s transparency and the privacy of students.

Dispersed responsibility, lack of asset inventory is causing gaps in medical device cybersecurity
Witnesses at a House hearing on medical device cybersecurity highlighted the need for better tracking of devices and their vulnerability to cyber threats. They noted