Interlock ransomware gang claims Kettering Health breach, leaks stolen data

News has surfaced that the Interlock ransomware gang has claimed a recent cyberattack on the Kettering Health:

This morning, ransomware gang Interlock has posted Kettering Health to its data leak site. It alleges to have stolen 941 GB of data, which includes 732,490 files across 20,418 folders and appears to contain ID cards, payment data, financial reports, and more.

Roger Grimes, Data-Driven Defense Evangelist at KnowBe4 has provided the following commentary:

“After any successful cyberattack, as an impacted victim I’m wondering two things (beyond just how the current breach has impacted my current privacy and personal risk). One, does the victim company know how the intruders gained unauthorized access to their systems? Was it social engineering (very likely), unpatched software or firmware (second most likely), or some other initial root access issue. Because if they don’t know how it happened, they can’t begin to take steps to stop it from happening (at least the same way). Second, what steps are being taken to reduce my current risk from the breach (i.e., am I getting some free protective services) and how can I be assured it won’t happen again (related to the first question). Because if I can’t be reassured it won’t happen again, I’m less likely to remain a customer.”

Another non-trivial health care breach with lots of stolen data that affects a whole lot of people. This is unfortunately becoming close to normal. And it should not be. The world really needs this to change and change quickly.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading