[Weekly Security News] US agency says it was alerted to breach by contractor CGI Federa

[Weekly Security News] US agency says it was alerted to breach by contractor CGI Federa

[February 22 2024]

1. US agency says it was alerted to breach by contractor CGI Federa

The U.S. Government Accountability Office said Monday that CGI Federal, an IT contractor and unit of CGI Inc (GIBa.TO). The GAO, a research arm of Congress, said in a statement the data involved personally identifiable information on employees including some people who worked there from 2007 to 2017. The letter said the breach had been carried out by a “threat actor exploiting a vulnerability in an externally provided platform” but didn’t delve into specifics.

Source : Reuters

 

2. Data breach affects 57,000 Bank of America accounts

Customers with deferred compensation plans at Bank of America had personally identifiable information including their Social Security number compromised through a third party, Infosys McCamish, which provides financial software. A data breach at Infosys McCamish compromised the name, address, date of birth, Social Security number, and other account information of 57,028 deferred compensation customers whose accounts were serviced by Bank of America.

Source : American Banker

 

3. Ransomware attack forces 100 Romanian hospitals to go offline

At least 18 hospitals in Romania were knocked offline after a ransomware attack took down their healthcare management system.The Hipocrate Information System (HIS) used by hospitals to manage medical activity and patient data was targeted over the weekend and is now offline after its database was encrypted.The incident is under investigation by IT specialists, including cybersecurity experts from the National Cyber Security Directorate (DNSC), and the possibilities for recovery are being assessed.

Source : Bleeping Computer

 

Check out Penta Security’s Cloudbric product lines:

Cloud-based Fully Managed WAAP: Cloudbric WAF+

Agent based Zero Trust Network Access Solution: Cloudbric PAS

Agentless Zero Trust Network Access Solution: Cloudbric RAS

Blockchain: Blockchain Security Solution

Click here for inquiries regarding the partner system of Cloudbric
Make sure to follow us on our social media platforms (LinkedIn, Twitter, and Facebook)

Check out Penta Security’s product lines:

Web Application Firewall: WAPPLES

Database Encryption: D’Amo

Identity and Access Management: iSIGN+ 

Car, Energy, Factory, City Solutions: Penta IoT Security

Click here for inquiries regarding the partner system of Penta Security
Make sure to follow us on our social media platforms (LinkedIn)