🔒Contractor Exposes 4,000 Patient Records via Secret Account
Secret account left open for 3 weeks, exposing patient data
TL;DR
A government contractor left a secret account with access to 4,000 patient records unrevoked for 3 weeks after an employee's departure. The breach cost the company hundreds of thousands of dollars and highlights critical security gaps.
A government contractor's security was compromised when an employee set up a secret account with access to 4,000 patient records. The account remained active for 14 days after the employee left, costing the company hundreds of thousands of dollars. This incident underscores the importance of timely revocation of access and robust security measures. The breach was possible due to a firewall rule change that allowed access from a low-security network to a classified datacenter, potentially exposing production servers to thousands of VPN users. The issue was resolved by reverting the firewall rule, but the damage was already done.
Key Points
Employee set up secret account with access to 4,000 patient records.
Account remained active for 14 days after employee's departure.
Company incurred costs of hundreds of thousands of dollars.
Firewall rule change allowed access from low-security to classified datacenter.
Issue resolved by reverting firewall rule after 3-week exposure.
Why It Matters
If you're handling sensitive data, this breach highlights the critical need for timely access revocation and robust security measures. The incident underscores the risks of insufficient safeguards, even with basic protections like passwords and firewalls. Any organization managing patient or immigration records must reassess their security protocols to prevent similar breaches.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.