Maffi Clinic notified the clients about a ransomware attack, the IT consulting firm determined that an unidentified source has gained remote access to their server and installed ransomware.
The consulting firm promptly identified the unauthorized access point and terminated it, isolated and removed the ransomware and restored all of their data.
The consulting firm also determined the unauthorized access began approximately 5 hours before the system was shut down, at which point the access ended.
The consulting firm found no evidence any of our data was viewed or downloaded and, to date, they have not received any ransom request.
Source: https://www.databreaches.net/maffi-clinic-notifies-10465-after-ransomware-incident/
TPRM report: https://scoringcyber.rankiteo.com/company/maffi-plastic-surgery
"id": "maf1728323",
"linkid": "maffi-plastic-surgery",
"type": "Ransomware",
"date": "03/2017",
"severity": "75",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Maffi Clinic',
'type': 'Healthcare'}],
'attack_vector': 'Remote Access',
'description': 'Maffi Clinic notified clients about a ransomware attack. An '
'unidentified source gained remote access to their server and '
'installed ransomware. The IT consulting firm identified and '
'terminated the access point, isolated and removed the '
'ransomware, and restored all data. The unauthorized access '
'began approximately 5 hours before the system shutdown. No '
'evidence of data being viewed or downloaded was found, and no '
'ransom request has been received.',
'impact': {'systems_affected': 'Server'},
'initial_access_broker': {'entry_point': 'Remote Access'},
'response': {'communication_strategy': 'Client notification',
'containment_measures': ['Terminated unauthorized access point',
'Isolated and removed ransomware'],
'remediation_measures': ['Data restoration'],
'third_party_assistance': 'IT Consulting Firm'},
'threat_actor': 'Unidentified',
'title': 'Ransomware Attack at Maffi Clinic',
'type': 'Ransomware'}