Cincinnati, Ohio based health system TriHealth announced employee and patient data may have been accessed after a breach occurred at one of their partnering businesses. A law firm known as Bricker & Eckler used by TriHealth suffered a ransomware attack that affected their email systems. During the attack, patient and employee information that had been provided to the law firm was accessed by the attackers. At this time TriHealth does not believe the information that was accessed has been used maliciously, but they have begun notifying patients and employees that may have been affected. Along with the notification, the health system is also providing up to a year’s worth of free credit and identity monitoring. Anyone else who has questions or thinks they could have been affected are asked to call the law firm.
Intruder Tactics: Privilege Escalation
Randy Pargman
May 7, 2021
What is privilege escalation? Privilege escalation is just a formal way of describing when an
