A ransomware group listed a medical practice on its leak site, leading to an investigation that revealed no patient or internal office data. Instead, the data dump contained files from a tax preparation service called Lacerte, including client documents from 2011 to 2024 such as forms, filing instructions, and invoices. Attempts to contact the tax preparer, Dennis Horton, were unsuccessful, raising concerns about the awareness of the situation and the necessity for client notifications in instances of breaches.
The data dump from a ransomware group, labeled under a medical practice, actually contained files from a tax preparation service named Lacerte, not any patient data or office files.
Files leaked included client-related documents dating from 2011 to 2024, such as mileage forms, filing instructions, and invoices from services provided by the tax preparer.
Despite multiple attempts to reach the tax preparer, Dennis Horton, including a voicemail and an email, there was no response received regarding the data leak.
The unexpected nature of this leak raises questions about whether the tax preparer knew of the hacking incident and if client notifications were warranted.
Collection
[
|
...
]