Utah Health Data Breach Affects Nearly 800,000

Theft of Medicaid data in Utah may have been joint effort between hackers, insiders

The number of Utah citizens affected by a data breach that occurred last week has grown from an initially reported 24,000 to a currently reported 780,000, according to news reports.
A
new report from Utah newspaper Deseret News
says Utah government officials now estimate that some 280,000 people had their Social Security numbers stolen, and some 500,000 had less sensitive data compromised.
The victims are likely to be people who visited health care providers in the past four months. Many are children who are enrolled in Childrens Health Insurance Program or Medicaid, although adults are also victims, officials said.
The reports do not say how the data was stolen, but officials say that the attack has been traced to hackers in eastern Europe. But officials are also investigating employees who were known to be present during the hours of the attack.
State officials offered some details on the nature of their security defenses. Mike Lloyd, CTO at RedSeal Networks, said that based on those reports, the Utah security architecture may be prone to human error.
They called out five distinct types of protections, Lloyd notes. This is typical; today’s IT infrastructure is highly complex, and the defenses built into the infrastructure are every bit as complex. Unfortunately, humans don’t handle complexity well -- it’s extremely difficult to consistently follow even basic, well-established guidelines in an infrastructure that’s large, complex, and rapidly moving.
Some security processes need to be automated, Lloyd suggests. People cannot scale to the challenge of identifying all possible cross-combinations of factors that can permit a breach such as [Utahs], he said. We have to deploy computers to validate that we follow our own rules, consistently, throughout our own infrastructure. So long as we rely on human effort, breaches of this sort will continue.
Have a comment on this story? Please click Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ Researchers create BlackForest to gather, link threat data. ◂ Discovered: 23/12/2024 Category: security	▸ Travel agency fined £150,000 for breaking Data Protection Act. ◂ Discovered: 23/12/2024 Category: security	▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Utah Health Data Breach Affects Nearly 800,000