[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb_3UvD_kaalyBCL_A3MLKXrDRh169FXI675LRECgioI":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"9173723d-3474-4e79-8705-3751ddbf3e81","250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms","250-000-impacted-by-data-breaches-at-new-jersey-texas-healthcare-firms-bd4b7f","Hackers stole patient information from Clover Health Investments and AngMar Management Services in July. The post 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms appeared first on SecurityWeek.","Clover Health Investments (New Jersey) and AngMar Management Services (Texas) reported separate data breaches affecting over 250,000 patients combined. Clover Health was compromised in early July via social engineering targeting three employee accounts, exposing names, dates of birth, insurance identifiers, and account numbers from 138,677 individuals. AngMar Management Services discovered suspicious activity in mid-July and confirmed the theft of patient PII and PHI affecting 126,196 people; the Interlock ransomware group claimed responsibility and posted over 700 GB of stolen data on its leak site.","250,000 patients affected by separate July breaches at Clover Health and AngMar Management Services.","https:\u002F\u002Fwww.securityweek.com\u002F250000-impacted-by-data-breaches-at-new-jersey-texas-healthcare-firms\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F10\u002Fbank-finance-lender-credit-union-hack.jpeg","2026-10-05T12:35:15+00:00","2026-10-05T14:00:22.178949+00:00",8,[17,20,22],{"name":18,"type":19},"Clover Health Investments","vendor",{"name":21,"type":19},"AngMar Management Services",{"name":23,"type":24},"Interlock","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":25,"icon":27,"name":28,"slug":29},null,"Breaches","breaches",[31,36,41],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":37},{"id":38,"icon":27,"name":39,"slug":40},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",{"category":42},{"id":43,"icon":27,"name":44,"slug":45},"fbace4ad-a9f5-407c-b73c-88cd9d221ecc","HIPAA","hipaa",[],[18,21],{"controls":49,"vendors":134},[50,79,105],{"slug":51,"name":52,"problem":53,"products":54},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":80,"name":81,"problem":82,"products":83},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":101,"product_name":102,"url":103,"description":104},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":106,"name":107,"problem":108,"products":109},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":152},"social-engineering-and-ransomware-expose-250000-healthcare-patients","Social Engineering and Ransomware Expose 250,000 Healthcare Patients","Two separate healthcare breaches affecting over 250,000 individuals highlight persistent vulnerabilities in employee account security and data protection practices. Clover Health fell victim to social engineering that compromised three employee accounts, demonstrating that human manipulation remains one of the most effective attack vectors. AngMar Management Services suffered a ransomware attack by the Interlock group, resulting in over 700 GB of sensitive PHI being publicly leaked. These incidents underscore the critical importance of healthcare organizations investing in both technical controls and human-layer defenses, as attackers frequently exploit the weakest link — people — to gain initial access before exfiltrating or encrypting sensitive data.",[140,141,142,143,144,145,146,147,148,149,150,151],"CIS Control 6: Access Control Management","CIS Control 14: Security Awareness and Skills Training","CIS Control 3: Data Protection","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AT-2: Security Awareness Training","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 IR-4: Incident Handling","HIPAA Security Rule 45 CFR § 164.308(a)(5): Security Awareness Training","HIPAA Security Rule 45 CFR § 164.312(a)(1): Access Control","HIPAA Breach Notification Rule 45 CFR §§ 164.400-414","NIST Cybersecurity Framework DE.CM-1: Network Monitoring","GDPR Article 32: Security of Processing",{}]