SECURITYTHE REGISTER
Talking smack about a doctor got him access to private medical files
A red teamer named Dahvid Schloss used social engineering to gain access to a hospital's records room by impersonating a new employee and criticizing a doctor, which convinced a nurse to let him in and retrieve a file. The incident highlights vulnerabilities in healthcare sector security, particularly human factors like compromised gatekeepers.
Mentioned
Related Signal
Adjacent reporting
- To gain root access at this company, all an intruder had to do was ask nicely
- iRhythm discloses data breach, says hackers stole patient info
- Millions at risk after healthcare breaches expose Social Security numbers and medical records from five US providers
- Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks
- Hackers steal patient and billing data from German hospitals via third-party provider