Cybersecurity Briefing: August 9, 2020 - Rising Threats and Major Breaches

# Lead Story: Experian Data Breach

Experian experienced a significant data breach affecting approximately 24 million South Africans and nearly 800,000 businesses. An individual impersonated a client to request sensitive information, resulting in the unauthorized release of personal data. Although Experian attempted to downplay the incident, it raised serious concerns about identity theft and fraud potential using the compromised data. This breach highlights the need for stringent verification processes and enhanced cybersecurity measures in handling sensitive information. Infosecurity Magazine

# Secondary Items

Ransomware Attack on R1 RCM

R1 RCM, a medical debt collection firm, fell victim to a ransomware attack that disrupted operations and compromised patient data. The incident employed the Defray ransomware, which typically spreads through malicious Microsoft Word documents in phishing campaigns. This attack underscores the vulnerabilities within healthcare organizations amid increasing cyber threats. Arctic Wolf

Discovery of Drovorub Malware

Researchers unveiled a new strain of malware named Drovorub, allegedly linked to Russian state-sponsored hackers. Designed to exploit vulnerabilities in Linux systems, Drovorub can create backdoors, posing a substantial threat to organizations utilizing these platforms. The discovery emphasizes the persistent risk of state-sponsored cyber activities and the need for robust defenses against such threats. Security.com

Breach of Canada's GCKey Portal

Canada’s GCKey online portal, crucial for accessing government services, was breached, compromising the credentials of over 9,000 users, primarily from the Canada Revenue Agency. This incident revealed significant vulnerabilities in governmental cybersecurity during the ongoing pandemic, prompting calls for improved security protocols. CISO Series

Surge in COVID-19 Related Cyber Threats

An INTERPOL report indicated a troubling spike in cyberattacks during the COVID-19 pandemic, with criminals exploiting the disarray. There has been a marked increase in malware, phishing, and scams targeting governments and organizations, further complicating the security landscape amid ongoing public health challenges. INTERPOL

# Analyst Perspective The cybersecurity landscape on August 9, 2020, reflects an alarming trend of increasing vulnerabilities and targeted attacks across various sectors. With significant breaches like Experian and ransomware incidents impacting critical healthcare infrastructure, organizations must prioritize cybersecurity resilience. As threat actors continue to exploit the chaos of the pandemic, it is imperative for both private and public sectors to adopt stringent cybersecurity measures and enhance incident response strategies to mitigate potential risks.