Dragos, a cybersecurity firm known for helping businesses mitigate cyberthreats, fended off a ransomware attack that threatened to leak data and extort money. The criminals accessed Dragos’ Sharepoint and contract management systems, claiming to have extracted 130GB of data. However, Dragos stated its layered security controls, including role-based access controls, prevented the group from launching ransomware or achieving lateral movement. The attempted extortion involved threatening calls to the executives’ family members, earning attention for its personal nature.
Change Healthcare data breach victim count rises to 190M
UnitedHealth Group announces that the number of victims in the Change Healthcare data breach has risen to 190 million, almost twice the reported figure in