Thirty-two suspected gang members were charged on suspicion of committing a high-tech crime.
It involved hacking into credit card terminals in dental and medical offices, and stealing patient identities.
The gangs, known as the BullyBoys and CoCo Boys, teamed up to steal at least 40 credit card terminals.
The terminals which are used to process credit and debit card payments were burglarized and hacked to process $1 million in fraudulent returns.
Some of the debit cards were opened with stolen identities.
Very personal and confidential information has been leaked to people.
Businesses in Vacaville and Walnut Creek were also affected.
Source: https://amp.sacbee.com/news/local/crime/article218148250.html
TPRM report: https://scoringcyber.rankiteo.com/company/county-of-sacramento
"id": "cou132301022",
"linkid": "county-of-sacramento",
"type": "Breach",
"date": "09/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': ['Healthcare', 'Retail'],
'location': ['Vacaville', 'Walnut Creek'],
'type': ['Medical Offices',
'Dental Offices',
'Businesses']}],
'attack_vector': 'Physical Burglary and Hacking',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient Identities',
'Confidential Information']},
'description': 'Thirty-two suspected gang members were charged on suspicion '
'of committing a high-tech crime. It involved hacking into '
'credit card terminals in dental and medical offices, and '
'stealing patient identities. The gangs, known as the '
'BullyBoys and CoCo Boys, teamed up to steal at least 40 '
'credit card terminals. The terminals which are used to '
'process credit and debit card payments were burglarized and '
'hacked to process $1 million in fraudulent returns. Some of '
'the debit cards were opened with stolen identities. Very '
'personal and confidential information has been leaked to '
'people. Businesses in Vacaville and Walnut Creek were also '
'affected.',
'impact': {'data_compromised': ['Patient Identities',
'Confidential Information'],
'financial_loss': '$1 million',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': ['Credit Card Terminals']},
'initial_access_broker': {'entry_point': 'Physical Burglary',
'high_value_targets': ['Medical Offices',
'Dental Offices']},
'motivation': 'Financial Gain',
'post_incident_analysis': {'root_causes': ['Weak security measures in credit '
'card terminals']},
'response': {'law_enforcement_notified': True},
'threat_actor': ['BullyBoys', 'CoCo Boys'],
'title': 'High-Tech Crime Involving Credit Card Terminals',
'type': 'Cyber Crime',
'vulnerability_exploited': 'Weak security measures in credit card terminals'}