[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn936Japy5lg5IunQp-TvSeabO7fYGpjm4-wY7Rixfg4":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"1dc03622-0a29-4a2c-9531-20dfd0e9178d","AdaptHealth confirms 4.1 million people exposed in July cyberattack","adapthealth-confirms-4-1-million-people-exposed-in-july-cyberattack-1e9110","Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group. [...]","Healthcare provider AdaptHealth has confirmed that a cyberattack discovered in July exposed the data of over 4.1 million individuals. The breach, attributed to the ShinyHunters threat group, occurred on June 5 through a social engineering attack compromising a third-party contractor's account. Exposed data includes names, contact information, demographic details, health insurance information, and health information.","AdaptHealth confirms 4.1 million patients' data exposed in July cyberattack by ShinyHunters.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fadapthealth-confirms-41-million-people-exposed-in-july-cyberattack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F09\u002Fhealthcare.jpg","2026-09-09T21:30:36+00:00","2026-09-09T22:00:53.567969+00:00",8,[17,20],{"name":18,"type":19},"AdaptHealth","vendor",{"name":21,"type":22},"ShinyHunters","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36,41],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"fbace4ad-a9f5-407c-b73c-88cd9d221ecc","HIPAA","hipaa",[],[18],{"controls":49,"vendors":137},[50,79,108],{"slug":51,"name":52,"problem":53,"products":54},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"slug":80,"name":81,"problem":82,"products":83},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":109,"name":110,"problem":111,"products":112},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":158},"social-engineering-via-third-party-contractor-exposes-41m-healthcare-records","Social Engineering via Third-Party Contractor Exposes 4.1M Healthcare Records","The AdaptHealth breach demonstrates the critical risk posed by third-party contractors who have privileged access to sensitive healthcare systems. ShinyHunters exploited a compromised contractor account through social engineering — a human-focused attack vector that bypasses technical defenses entirely. Healthcare organizations are high-value targets because they hold both financial and medical data, making robust third-party access governance essential. This incident highlights that an organization's security posture is only as strong as its weakest external partner.",[143,144,145,146,147,148,149,150,151,152,153,154,155,156,157],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 14 – Security Awareness and Skills Training","CIS Control 15 – Service Provider Management","NIST SP 800-171 – Protecting CUI in Nonfederal Systems","NIST AC-2 – Account Management","NIST AC-17 – Remote Access","NIST SR-6 – Supplier Assessments and Reviews","NIST IR-6 – Incident Reporting","HIPAA § 164.308(a)(3) – Workforce Access Management","HIPAA § 164.308(b)(1) – Business Associate Contracts","GDPR Article 28 – Processor Obligations","GDPR Article 32 – Security of Processing","ITIL – Supplier Management Practice","ISO 27001 A.15 – Supplier Relationships",{}]