https://pwn.watch/t/alphv Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 22 Oct 2024 00:00:00 GMT https://pwn.watch/i/change-healthcare-ransomware-attack https://pwn.watch/i/change-healthcare-ransomware-attack Tue, 22 Oct 2024 00:00:00 GMT critical <p>The ALPHV/BlackCat ransomware gang got into UnitedHealth's Change Healthcare on 2024-02-12 using stolen credentials for a Citrix remote-access portal without multi-factor authentication, then deployed ransomware on 2024-02-21. Claims processing and pharmacy payments across the US health system were disrupted for weeks. By October 2024 Change Healthcare had sent about 100 million notices to individuals (later estimates were about 190 million people).</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2024-10-22: Change Healthcare tells HHS OCR it has sent about 100 million individual notices (<a href="https://www.hhs.gov/hipaa/for-professionals/special-topics/change-healthcare-cybersecurity-incident-frequently-asked-questions/index.html">source</a>)</li><li>2024-05-01: CEO Andrew Witty testifies before the Senate Finance Committee (<a href="https://www.finance.senate.gov/imo/media/doc/0501%5Fwitty%5Ftestimony.pdf">source</a>)</li><li>2024-04-22: UnitedHealth: stolen files could cover a substantial proportion of people in America (<a href="https://www.unitedhealthgroup.com/newsroom/2024/2024-04-22-uhg-updates-on-change-healthcare-cyberattack.html">source</a>)</li></ul> https://pwn.watch/i/mgm-resorts-caesars-scattered-spider-2023 https://pwn.watch/i/mgm-resorts-caesars-scattered-spider-2023 Thu, 05 Oct 2023 00:00:00 GMT high <p>Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2023-10-05: MGM 8-K: about $100M impact on Adjusted Property EBITDAR, data of customers from before March 2019 stolen (<a href="https://www.sec.gov/Archives/edgar/data/789570/000119312523251667/d461062d8k.htm">source</a>)</li><li>2023-09-14: Caesars 8-K filing; reports say it paid about half of a $30M demand (<a href="https://www.cnbc.com/2023/09/14/caesars-paid-millions-in-ransom-to-cybercrime-group-prior-to-mgm-hack.html">source</a>)</li><li>2023-09-12: MGM statement on the cybersecurity issue (<a href="https://investors.mgmresorts.com/2023-09-12-MGM-RESORTS-INTERNATIONAL-STATEMENT-ON-CYBERSECURITY-ISSUE">source</a>)</li></ul>