Apple has released a series of new security updates, and California residents should be on guard after a group of medical organizations experienced a ransomware attack affecting 3.3 million patients.
Apple Releases Security Updates
Apple has released new security updates for iPhones, iPads and Macs. The tech company released these updates to address vulnerabilities that may have been actively exploited.
What Devices Are Affected?
iPhone 8 and later, iPad Pro (all models), iPad Air 3d generation and later, iPad 5th generation and later, iPad mini 5th generation and later, and macOS Ventura.
What To Do About This?
Even if your device has Automatic Updates enabled, we've seen instances where updates are not happening automatically, so you may need to tap or click to initiate the download and install. To learn how to download these updates, consult our guide on updating your mobile devices and computers.
Regal Medical Group, Lakeside Medical Organization, ADOC Medical Group, and Greater Covina Medical were all attacked in the incident.
What Data Was Exposed?
Compromised data points included patients' names, Social Security numbers, dates of birth, addresses, phone numbers, medical diagnosis and treatment information, lab test results, health plan member numbers, radiology reports and prescription data.
What To Do About This?
If you received a notice that you were impacted by this breach, follow these steps:
Since sensitive information was exposed in the incident, you should strongly consider placing a credit freeze and fraud alert on your accounts, which you can do through the BlackCloak mobile and desktop applications.
Be on the lookout for phishing attacks, including SMS text message phishing scams, known as "smishing," and voicemail phishing attacks, or "vishing."
Keep an eye out for any messages you may receive that convey a sense of urgency, or try to get you to turn over more personal information or login credentials. To learn more, watch our webinar on how to spot cyber scam red flags.
Another issue to note: Ransomware attackers may use patients' prescription and diagnosis data to extort patients. If you are impacted by this, or any other health data breach, and receive an extortion demand, do not engage or respond. Contact BlackCloak immediately so we can advise before taking any action.
If you have any additional questions, email us at ask@BlackCloak.io or schedule a Concierge Session via the BlackCloak app Support tab.