Kroger Pharmacy had the data of 1,474,284 of its customers stolen, Health Net has reported the breach as affecting 1,236,902 members, Trinity Health said 586,869 patients had been affected, California Health & Wellness reported the breach as affecting 80,138 members, Trillium Health Plan said 50,000 had been affected, and 29,390 members of Arizona Complete Health had their PHI compromised. The number of healthcare organizations affected by the Accellion data breach is not yet known, but so far at least 9 healthcare organizations are known to have been affected. Singtel reports that it’s working closely with the Cyber Security Agency of Singapore after a breach of its Accellion FTA system. (Accellion) to perform a security assessment of Accellion's File Transfer Appliance (FTA) software, in the wake of two related but distinct exploits used to attack client Accellion FTA systemsone that was discovered and addressed by Accellion in December 2020 (the December Exploit), and another that was discovered and addressed. The latest victims are Singapore telecom company Singtel and Australian medical research institute QIMR Berghofer. Executive Summary Mandiant was engaged by Accellion, Inc. The data leak site of the Clop ransomware gang was used to publish some of the stolen data to encourage payment of the ransom. Two more breaches have been tied to the vulnerable 20-year-old Accellion File Transfer Appliance. Ransomware was not used in the attack, but the incident has been linked to the Clop ransomware gang. In December 2020, hackers chained exploits for multiple zero-day vulnerabilities in the legacy Accellion File Transfer Appliance and exfiltrated data, then issued a demand for payment to ensure the return/deletion of the data. Around 100 companies still using the solution had data compromised in the attack.

Most users of the Accellion FTA had already switched to Kiteworks or an alternative solution at the time of the cyberattack. For the past 3 years Accellion has been trying to encourage customers to switch to its newer, more secure Kiteworks platform. The Accellion FTA reaches end-of-live on April 30, 2021. Documents are the lifeblood of every organization. The Accellion FTA was released around 20 years ago to allow enterprises to securely share files that were too large to send via email. File transfer appliance from Accellion aims to ease e-mail attachment headaches. But the appliance is capable of handing all file transfers and eliminates the need for FTP. Over the past few days, several health insurers and healthcare providers have confirmed they have been affected by the cyberattack. Companies often have to dedicate special FTP servers to moving files. The number of healthcare organizations known to have been affected by the Accellion cyberattack has been growing.

Accellion file transfer appliance