Data Breaches of Software Firms Ocuco and Episource Hit Health Sector
BankInfoSecurity
|
Contributed by: Drex DeFord
Summary
Ocuco and Episource have reported significant data breaches in the health sector, affecting hundreds of thousands of individuals. Ocuco's breach involved unauthorized access to its network server, impacting nearly 241,000 people due to a vulnerability in third-party software, with a ransomware group claiming to have stolen over 340 gigabytes of data. The company is conducting a review to identify affected individuals and plans to notify them accordingly. Meanwhile, Episource faced a ransomware incident affecting thousands, including 24,259 individuals in Texas, with unauthorized access occurring between late January and early February. Although the breach hasn't been reported to the HHS Office for Civil Rights, many of Episource’s healthcare clients are issuing public notices about the compromised personal and health information.