[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTfhK77LEnUiw1dE-u-Yq-BWKTecBz9v4ED07FJ-h3k0":3},{"article":4,"iocs":46,"watch_terms":54,"solutions":55,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":33},"3bea3b75-c688-488a-b576-8e4fe933d6de","Veradigm warns of patient data breach after ransomware gang claims attack","veradigm-warns-of-patient-data-breach-after-ransomware-gang-claims-attack-1f1434","Healthcare technology company Veradigm disclosed a data breach after a cybersecurity incident at one of its third-party vendors exposed patients' personal data. [...]","Healthcare technology company Veradigm has disclosed a data breach impacting patient personal data, including Social Security numbers, following a cybersecurity incident at a third-party vendor. The Gentlemen ransomware group has claimed responsibility, alleging to possess 3.5 million patient records and threatening to leak the data if a ransom is not paid. Veradigm is investigating and notifying affected parties, stating that clinical information remains secure.","Veradigm reports patient data breach after ransomware gang claims attack.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fveradigm-discloses-patient-data-breach-after-gentlemen-gang-claims-attack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F06\u002F18\u002Fgentlemen.jpg","2026-09-09T15:31:23+00:00","2026-09-09T16:00:41.312759+00:00",8,[17,20,23,26],{"name":18,"type":19},"Veradigm","vendor",{"name":21,"type":22},"The Gentlemen","threat_actor",{"name":24,"type":25},"API","product",{"name":27,"type":28},"ransomware","technology","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":29,"icon":31,"name":32,"slug":27},null,"Ransomware",[34,39,41],{"category":35},{"id":36,"icon":31,"name":37,"slug":38},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":40},{"id":29,"icon":31,"name":32,"slug":27},{"category":42},{"id":43,"icon":31,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47,51],{"type":48,"value":49,"context":50},"malware","GentleKiller","EDR killer used by The Gentlemen ransomware gang.",{"type":48,"value":52,"context":53},"SystemBC","Proxy malware botnet linked to an affiliate of The Gentlemen ransomware gang.",[18],{"controls":56,"vendors":141},[57,86,112],{"slug":58,"name":59,"problem":60,"products":61},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":87,"name":88,"problem":89,"products":90},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[91,99,104],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":100,"product_name":101,"url":102,"description":103},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":113,"name":114,"problem":115,"products":116},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":158},"veradigm-patient-data-breach-traced-to-third-party-vendor-ransomware-attack","Veradigm Patient Data Breach Traced to Third-Party Vendor Ransomware Attack","The Veradigm breach highlights a critical and growing risk: sensitive patient data being exposed not through a direct attack on the primary organization, but through a compromise at a third-party vendor. Healthcare organizations routinely share protected health information (PHI) and personally identifiable information (PII) — including Social Security numbers — with vendors, yet oversight of those vendors' security postures is often insufficient. The Gentlemen ransomware group's claim to hold 3.5 million records demonstrates the scale of damage that a single weak link in the supply chain can cause. This incident underscores that a healthcare entity's regulatory and ethical obligations to protect patient data do not end at its own perimeter — they extend to every vendor entrusted with that data.",[147,148,149,150,151,152,153,154,155,156,157],"NIST CSF PR.AC-4 (Access Permissions & Authorizations)","NIST CSF ID.SC-4 (Supply Chain Risk Management)","NIST SP 800-161 (C-SCRM)","CIS Control 15 (Service Provider Management)","CIS Control 3 (Data Protection)","HIPAA Security Rule 45 CFR §164.308(b) – Business Associate Contracts","HIPAA Breach Notification Rule 45 CFR §164.400–414","GDPR Article 28 (Processor Obligations)","GDPR Article 33 (Breach Notification to Supervisory Authority)","ISO\u002FIEC 27001 Annex A.15 (Supplier Relationships)","ITIL Service Design – Supplier Management",{}]