TLDR InfoSec · ATTACKS & VULNERABILITIES
CLINICAL DATA STOLEN IN CYBER-ATTACK ON KIDNEY DIALYSIS PROVIDER DAVITA
Summary from the TLDR InfoSec newsletter
US-based kidney dialysis provider DaVita confirmed that sensitive PII and clinical data were stolen from its systems, impacting over 900K customers. In an attack that began on March 24 and continued until April 12, the attackers stole names, dates of birth, SSNs, health-insurance information, health conditions and other treatment details, specific dialysis lab test results, tax identification numbers, and images of checks written to DaVita.