Technology
Indian company Star Health confirms a data breach after cybercriminals posted customer health data online
Star Health and Allied Insurance, considered one of India’s largest health insurance firms, has confirmed that it has been the goal of a “malicious cyberattack” some two weeks after cybercriminals claimed to have uploaded customers’ medical records and other sensitive data online.
The Chennai-based insurance giant told TechCrunch in a statement on Wednesday that the cyberattack resulted in “unauthorized and illegal access to certain data,” even though it said it had no impact on its operations or service delivery.
“A thorough and rigorous forensic investigation is ongoing, led by independent cybersecurity experts, and we are working closely with the government and regulators at every stage of this investigation, including by properly reporting the incident to insurance and cybersecurity regulators, in addition to filing a criminal complaint ” – the company said in its statement.
When asked by TechCrunch, Star Health didn’t respond whether the data breach included customer data.
Last month, a group of hackers created chatbots on Telegram that allegedly exposed personal information belonging to 31 million Star Health policyholders and greater than 5.8 million insurance claims. The data included names, telephone numbers and residential addresses, in addition to medical certificates and insurance claims of people. The hackers also provided copies of shoppers’ ID cards and individual tax details.
Star Health told TechCrunch on the time that the company was “investigating” the alleged theft.
Soon after the hacker’s Telegram bots got here to light, Star Health filed a legal grievance within the Madras High Court against Telegram for hosting chatbots. The insurer also named Cloudflare in its lawsuit for its role in hosting the hacker group’s web sites on its service.
India’s CERT-In previously told TechCrunch that it’s “already in the process of taking appropriate action with the concerned authority.”
Details of the breach and the way hackers obtained potentially thousands and thousands of customer records remain unclear.
The hacker’s website, used to publicize Telegram bots sharing allegedly stolen people’s data, incorporates a video purporting to indicate screenshots and conversations between Star Health CISO Amarjeet Khanuja and a group of hackers. TechCrunch doesn’t link to the positioning since it incorporates personal information.
The company’s CISO’s role within the cyberattack, if any, shouldn’t be yet known.
“We would also wish to categorically mention that our CISO duly cooperated within the investigation and up to now we’ve not come to any conclusions about his irregularities. We ask you to respect his privacy as we all know the threat actor is attempting to cause panic,” the insurer said on Wednesday.
TechCrunch asked detailed questions, including: whether the insurer can confirm who accessed the data, whether it was an insider or a malicious intruder, and whether it knows and may confirm what has already been accessed or taken. The insurer didn’t need to say.
Star Health, which provides health, accident, foreign and travel insurance, has a network of over 14,000 hospitals and over 850 branches across India. Star Health says on its website that it has provided health insurance to 170 million people.
Technology
‘Wolves’ sequel canceled because director ‘no longer trusted’ Apple
It could also be hard to recollect, but George Clooney and Brad Pitt starred together within the movie “Wolves,” which Apple released just two months ago.
On Friday, the film’s author and director Jon Watts said Friday that the sequel is not any longer happening; IN one other interview for Deadlinehe explained that he “no longer trusts (Apple) as a creative partner.”
According to reports, the corporate limiting your film strategy. For example, “Wolfs” was imagined to have a giant theatrical release, but as an alternative it played in a limited variety of theaters for just per week before it landed on Apple TV+.
Watts, who also created the brand new Star Wars series “Skeleton Crew,” said Apple’s change “came as a complete surprise and was made without any explanation or discussion.”
“I was completely shocked and asked them not to tell me I was writing a sequel,” Watts said. “They ignored my request and announced it in their press release anyway, apparently to put a positive spin on their streaming axis.”
As a result, Watts said he “quietly refunded the money they gave me to continue” and canceled the project.
Technology
The Rise and Fall of the “Scattered Spider” Hackers.
After greater than two years of evading capture following a hacking spree that targeted some of the world’s largest technology firms, U.S. authorities say they’ve finally caught a minimum of some of the hackers responsible.
In August 2022 security researchers made their information public with a warning that a bunch of hackers targeted greater than 130 organizations in a complicated phishing campaign that stole the credentials of nearly 10,000 employees. The hackers specifically targeted firms that use Okta, a single sign-on service provider that hundreds of firms around the world use to permit their employees to log in from home.
Due to its give attention to Okta, the hacker group was dubbed “0ktapus”. By now the group has been hacked Caesar’s entertainmentCoinbase, DoorDash, Mailchimp, Riot Games, Twilio (twice) and dozens more.
The most notable and severe cyber attack by hackers in terms of downtime and impact was the September 2023 breach of MGM Resorts, which reportedly cost the casino and hotel giant a minimum of $100 million. In this case, the hackers collaborated with the Russian-speaking ransomware gang ALPHV and demanded a ransom from MGM for the company to get better its files. The break-in was such a nuisance that MGM-owned casinos had problems with service delivery for several days.
Over the past two years, as law enforcement has closed in on hackers, people in the cybersecurity industry have been attempting to work out exactly tips on how to classify hackers and whether to place them in a single group or one other.
Techniques utilized by hackers similar to social engineering, email and SMS phishing, and SIM swapping are common and widespread. Some of the individual hackers were part of several groups chargeable for various data breaches. These circumstances make it obscure exactly who belongs to which group. Cybersecurity giant CrowdStrike has dubbed this hacker group “Scattered Spider,” and researchers imagine it has some overlap with 0ktapus.
The group was so energetic and successful that the US cybersecurity agency CISA and the FBI issued a advice in late 2023 with detailed details about the group’s activities and techniques in an try and help organizations prepare for and defend against anticipated attacks.
Scattered Spider is a “cybercriminal group targeting large companies and their IT helpdesks,” CISA said in its advisory. The agency warned that the group “typically engaged in data theft for extortion purposes” and noted its known ties to ransomware gangs.
One thing that is comparatively certain is that hackers mostly speak English and are generally believed to be teenagers or early 20s, and are sometimes called “advanced, persistent teenagers.”
“A disproportionate number of minors are involved and this is because the group deliberately recruits minors due to the lenient legal environment in which these minors live, and they know that nothing will happen to them if the police catch the child” – Allison Nixon , director of research for Unit 221B, told TechCrunch at the time.
Over the past two years, some members of 0ktapus and Scattered Spider have been linked to a similarly nebulous group of cybercriminals generally known as “Com” People inside this broader cybercriminal community committed crimes that leaked into the real world. Some of them are chargeable for acts of violence similar to robberies, burglaries and bricklaying – hiring thugs to throw bricks at someone’s house or apartment; and swatting – when someone tricks authorities into believing that a violent crime has occurred, prompting the intervention of an armed police unit. Although born as a joke, the swat has fatal consequences.
After two years of hacking, authorities are finally starting to discover and prosecute Scattered Spider members.
in July This was confirmed by the British police arrest of a 17-year-old in reference to the MGM burglary.
In November, the U.S. Department of Justice announced it had indicted five hackers: Ahmed Hossam Eldin Elbadawy, 23, of College Station, Texas; Noah Michael Urban, 20, from Palm Coast, Florida, arrested in January; Evans Onyeaka Osiebo, 20, of Dallas, Texas; Joel Martin Evans, 25, of Jacksonville, North Carolina; and Tyler Robert Buchanan, 22, from the UK, who was arrested in June in Spain.
Technology
OpenAI accidentally deleted potential evidence in NY Times copyright lawsuit (update)
Lawyers for The New York Times and Daily News, who’re suing OpenAI for allegedly copying their work to coach artificial intelligence models without permission, say OpenAI engineers accidentally deleted potentially relevant data.
Earlier this fall, OpenAI agreed to offer two virtual machines in order that advisors to The Times and Daily News could seek for copyrighted content in their AI training kits. (Virtual machines are software-based computers that exist inside one other computer’s operating system and are sometimes used for testing purposes, backing up data, and running applications.) letterlawyers for the publishers say they and the experts they hired have spent greater than 150 hours since November 1 combing through OpenAI training data.
However, on November 14, OpenAI engineers deleted all publisher search data stored on one among the virtual machines, in keeping with the above-mentioned letter, which was filed late Wednesday in the U.S. District Court for the Southern District of New York.
OpenAI tried to get better the information – and was mostly successful. However, since the folder structure and filenames were “irretrievably” lost, the recovered data “cannot be used to determine where the news authors’ copied articles were used to build the (OpenAI) models,” the letter says.
“The news plaintiffs were forced to recreate their work from scratch, using significant man-hours and computer processing time,” lawyers for The Times and the Daily News wrote. “The plaintiffs of the news learned only yesterday that the recovered data was useless and that the work of experts and lawyers, which took a whole week, had to be repeated, which is why this supplementary letter is being filed today.”
The plaintiffs’ attorney explains that they don’t have any reason to consider the removal was intentional. However, they are saying the incident highlights that OpenAI “is in the best position to search its own datasets” for potentially infringing content using its own tools.
An OpenAI spokesman declined to make an announcement.
However, late Friday, November 22, OpenAI’s lawyer filed a motion answer to a letter sent Wednesday by attorneys to The Times and Daily News. In their response, OpenAI’s lawyers unequivocally denied that OpenAI had deleted any evidence and as a substitute suggested that the plaintiffs were guilty for a system misconfiguration that led to the technical problem.
“Plaintiffs requested that one of several machines provided by OpenAI be reconfigured to search training datasets,” OpenAI’s attorney wrote. “Implementation of plaintiffs’ requested change, however, resulted in the deletion of the folder structure and certain file names from one hard drive – a drive that was intended to serve as a temporary cache… In any event, there is no reason to believe that any files were actually lost.”
In this and other cases, OpenAI maintains that training models using publicly available data – including articles from The Times and Daily News – are permissible. In other words, by creating models like GPT-4o that “learn” from billions of examples of e-books, essays, and other materials to generate human-sounding text, OpenAI believes there isn’t a licensing or other payment required for examples – even when he makes money from these models.
With this in mind, OpenAI has signed licensing agreements with a growing number of recent publishers, including the Associated Press, Business Insider owner Axel Springer, the Financial Times, People’s parent company Dotdash Meredith and News Corp. OpenAI declined to offer the terms of those agreements. offers are public, but one among its content partners, Dotdash, is apparently earns at the least $16 million a 12 months.
OpenAI has not confirmed or denied that it has trained its AI systems on any copyrighted works without permission.
-
Press Release8 months ago
CEO of 360WiSE Launches Mentorship Program in Overtown Miami FL
-
Business and Finance6 months ago
The Importance of Owning Your Distribution Media Platform
-
Press Release8 months ago
U.S.-Africa Chamber of Commerce Appoints Robert Alexander of 360WiseMedia as Board Director
-
Business and Finance8 months ago
360Wise Media and McDonald’s NY Tri-State Owner Operators Celebrate Success of “Faces of Black History” Campaign with Over 2 Million Event Visits
-
Ben Crump7 months ago
Another lawsuit accuses Google of bias against Black minority employees
-
Fitness7 months ago
Black sportswear brands for your 2024 fitness journey
-
Theater8 months ago
Applications open for the 2020-2021 Soul Producing National Black Theater residency – Black Theater Matters
-
Ben Crump8 months ago
Henrietta Lacks’ family members reach an agreement after her cells undergo advanced medical tests