Medical College of Wisconsin Data Breach
Date: May, 2023Based in Milwaukee, the Medical College of Wisconsin (MCW) offers thousands of students learning opportunities. MCW utilizes many vendors to complete and assist with admin duties for the college; Progress Software’s MOVEit file transfer tool was one of these. However, that will likely change, given MOVEit’s evolving data breach.
What Was the Breach?
- Full Names
- Dates of Birth
- Social Security Numbers
- Driver’s License/Government ID
- Financial Account Information
- Medical Diagnosis Information
- Medical Provider and Prescription Names
How Did the Breach Occur?
MOVEit’s file transfer tool allows users to move files seamlessly, regardless of differing software. The utility of its tools got back shelved earlier this year when a zero-day vulnerability appeared within its system. The vulnerability allowed hackers to enter organization systems worldwide.
When Did This Breach Occur?
Progress Software announced MOVEit’s vulnerability on May 31st, 2023; impacted organizations immediately began investigations. MCW completed its review around September 21st, confirming the attack occurred around May 27th. MCW began sending notices to those impacted around November 14th.
Who Does the Breach Impact?
It is unclear what groups may feel the impact of the breach. Medical patients, students, attending doctors, associated faculty, alums, and vendors may have information exposed in the breach. Until more is made public, anyone associated with MCW could have data at risk for misuse.
How Many Files Does the Breach Affect?
The total number of impacted files is unclear. The Texas Attorney General’s website breach filing indicates 550 Texans impacted, but the final number is higher. At this time, all parties with a relationship with MCW should take preventative measures to secure their data. Increasing your account security wherever possible, then invest in monitoring services.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...