Magellan Health

The renowned healthcare giant Magellan Health was targeted in a ransomware attack in early 2020.

The attackers used malware to get access to the employee login credentials.

The information including staff’s personal details, patient’s details, and medical history was also leaked.

Source: https://thehackpost.com/major-recent-cyber-attacks-of-2020-and-precautions.html

TPRM report: https://scoringcyber.rankiteo.com/company/magellan-health

"id": "mag201811222",
"linkid": "magellan-health",
"type": "Ransomware",
"date": "02/2020",
"severity": "75",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Magellan Health',
                        'type': 'Healthcare'}],
 'attack_vector': 'Malware',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal details',
                                              'Medical history']},
 'description': 'The renowned healthcare giant Magellan Health was targeted in '
                'a ransomware attack in early 2020. The attackers used malware '
                'to get access to the employee login credentials. The '
                'information including staff’s personal details, patient’s '
                'details, and medical history was also leaked.',
 'impact': {'data_compromised': ['Staff’s personal details',
                                 'Patient’s details',
                                 'Medical history']},
 'initial_access_broker': {'entry_point': 'Employee login credentials'},
 'motivation': 'Data Theft',
 'post_incident_analysis': {'root_causes': 'Employee login credentials '
                                           'compromised'},
 'ransomware': {'data_exfiltration': True},
 'title': 'Ransomware Attack on Magellan Health',
 'type': 'Ransomware Attack',
 'vulnerability_exploited': 'Employee login credentials'}