[et_pb_section fb_built=”1″ _builder_version=”4.4.6″ custom_padding=”0px|||||” da_disable_devices=”off|off|off” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.4.6″ custom_padding=”||8px|||”][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.8.2″]

It is scary how quickly attacks can escalate and impact organizations within a supply chain, where messages from friendly accounts are typically trusted.

[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.4.6″ custom_padding=”5px||8px|||”][et_pb_column type=”1_2″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.8.2″]

An email compromise can spread quickly

On January 4, an attacker took over an email account at a healthcare organization called Alphonsus Health System in Boise Idaho. During the two days it took for the compromise to be discovered, the attacker had used the stolen email account to send invoices to other organizations, including Alphonsus’s sister hospital, Saint Agnes Medical Centre in Fresno, CA.

[/et_pb_text][/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.4.6″][et_pb_image src=”https://clickarmor.ca/wp-content/uploads/2021/03/saint-agnes-north-1024×683-1.jpg” alt=”saint agnes” title_text=”saint-agnes-north-1024×683″ show_in_lightbox=”on” _builder_version=”4.8.2″ width=”100%”][/et_pb_image][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”4.4.6″ custom_padding=”8px|||||”][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_text _builder_version=”4.8.2″]

Sensitive records were impacted

This attack resulted in the exposure of an undisclosed number of records, which included patient addresses, phone numbers, dates of birth, and some Social Security Numbers and credit card numbers.

This kind of attack typically exploits employees’ lack of good password protection practices, combined with insufficient or ineffective training on how to spot phishing messages.

 

 

Did you know that Click Armor has gamified phishing assessments? If you’re wondering what these look like, you can try a simple gamified phishing assessment at www.canibephished.com to test your own phishing awareness skills. We can do it for teams, as well, without even needing to register employees into accounts. Contact us to learn more.

 

Photo from Saint Alfonsus Facebook page.

 

[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”4.4.6″][et_pb_column type=”4_4″ _builder_version=”4.4.6″][et_pb_post_nav prev_text=”Previous Post” next_text=”Next Post” _builder_version=”4.4.6″ title_text_color=”#ffffff” background_color=”rgba(14,79,136,0.68)” custom_padding=”5px|10px|5px|10px|true|true” border_radii=”on|4px|4px|4px|4px” border_width_all=”1px”][/et_pb_post_nav][/et_pb_column][/et_pb_row][/et_pb_section]