Drex covers three critical cybersecurity stories: Oracle's evolving response to two separate breaches affecting healthcare customers, with the company gradually changing its stance from denial to downplaying the significance of compromised data. Next Arizona-based Simon Med imaging practice facing multiple federal class action lawsuits after the Medusa cyber gang stole sensitive information from over 132,000 patients across seven states. Ukraine's innovative cyber warfare tactic of planting malware on drones that are captured by Russian forces, creating a cybersecurity trap when Russians attempt to study or reprogram the devices.
Remember, Stay a Little Paranoid
Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer
Hey everyone. I'm Drex, and this is the two minute drill where I cover three hot security stories twice a week. All part of the cyber and risk community here at the 229 Project and this week, health, I try to keep the podcast mostly plain English and mostly non-technical, so it's easy for everyone in the organization to consume so that everyone can.
Do their part to keep patients and families and the whole health system safe. Today's episode is brought to you by Google. Healthcare Systems are lowering cost and boosting endpoint security with Chrome OS devices paired with Chrome Enterprise, a secure browser that's trusted by billions of users. So now there's a better way.
For healthcare teams to work safely on the web, learn more, or schedule some time with the Google Healthcare team at this week, health.com/chromeos. Great to see everyone today. Here's some stuff you might wanna know about I. Just a quick update on the Oracle breach story. As you probably know, Oracle is now talking to customers about two different breaches that have happened over the past several weeks.
Last month, data went up for sale on the dark web. The data was allegedly stolen from Oracle. That first security incident was mostly tied to log in and identity data. For Oracle Cloud Services, the second breach has been tied to an attack on legacy infrastructure affecting their healthcare customers.
Over the past few weeks, Oracle's gone from saying there was no breach to now admitting there was a breach to now quietly wordsmithing with customers that even if there was a breach, the data that was stolen was old. And so it probably doesn't really pose that much of a risk from the customers I've talked to.
I can tell you they don't seem convinced there's a regular drip of new information on this situation, and as I find stories that are worth reading, I'm posting them to the news site. I. Arizona based medical imaging practice. Simon Med is notifying patients across the 160 locations and seven states that they've had data compromised in a cyber attack.
The cyber gang, Medusa, is apparently responsible for the attack. They stole sensitive data connected to at least 132,000 patients. There's now at least. Three federal class action lawsuits underway against Simon Med. One of those lawsuits alleges that the data leaked so far, includes photocopy, driver's license, passports, and other sensitive patient information.
And finally, today there's a really interesting story about the war in Ukraine. The Ukrainian military have made use of drones. To fight that war in a very innovative, unconventional way, and now they're using those drones to not only blow up tanks and autonomous surveillance aircraft. They're using those drones as part of an anti-Russian cyber operation.
Ukrainian drones, when disabled or captured by the Russians are. Are then plugged into Russian networks in an effort to better understand the technology or even reprogram the devices. Well, it turns out now the Ukrainians are including malware on those drones. So if they're captured and the Russians tap into the devices, the malware delivers a nasty cyber payload, which obviously limits Russia's ability to study or reuse those drones.
You can read more on that story and all the latest healthcare innovation, tech and security news at the industry's fastest growing news site this week. health.com/news. Today's episode is brought to you by Google. You can keep your patients data safe and reduce the burden for IT operations staff. And create a better clinician experience all with one platform.
Google Chrome OS with Chrome Enterprise. Find out how by scheduling a chat today. Go to this week, health.com/chromeos. By the way, you can get all the past episodes of the two minute drill if you've missed any of them at this week. health.com/unh hack. That's it for today's two minute drill. Thanks for being here.
Stay a little paranoid and I'll see you around campus.