audit

A data breach at an Iowa hospital has exposed the Social Security numbers and private medical information of more than 60,000 patients.  Mercy Iowa City began notifying patients on November 13 of a data breach that occurred in spring 2020 after an employee’s email account was accessed by a threat actor.  The hospital detected the breach on June 24 when the targeted account began sending out phishing emails and spam. An investigation revealed that the hacked account had been compromised between May 15 and June 24. Security experts brought in...