Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims' family and friends (www.malwarebytes.com)
from L4s@lemmy.world to technology@lemmy.world on 14 Nov 2023 00:00
https://lemmy.world/post/8223738

Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims’ family and friends::The FBI is investigating a data breach where cybercriminals were able to steal patients’ records from a Las Vegas plastic surgeon’s office and then publish them online.

#technology

threaded - newest

moistclump@lemmy.world on 14 Nov 2023 00:06 next collapse

Yikes. What a weird, cruel thing for someone to do.

[deleted] on 14 Nov 2023 00:18 next collapse

.

[deleted] on 14 Nov 2023 02:28 collapse

.

naonintendois@programming.dev on 14 Nov 2023 03:00 next collapse

HD encryption only helps if they get physical access to the disk when the device is locked or powered off. If they get it via a backdoor or virus, then it doesn’t help.

KairuByte@lemmy.dbzer0.com on 14 Nov 2023 06:51 collapse

That isn’t at all the argument presented by those opposed to “nothing to hide” mentality. You’re simply going from one extreme to the other, and presenting a strawman.

andrew@lemmy.stuart.fun on 14 Nov 2023 01:37 next collapse

Honestly the whole before/after nude photo aspect of plastic surgery feels so weird even if they’re never hacked. No other doctors do this with photos. And I get it, portfolio and all that, but at least offer a discount of something. But everyone? For medical reasons? Not even just kinda creepy, that’s meaningfully creepy. And as made evident by this breach, not even a little surprising that they have substandard information security policies. Anybody at the office could probably get access to the shared folder they probably stuff these into. And the doctor’s kids all probably know his crappy password that never changes. So so so many ways this could and will go wrong.

Kissaki@feddit.de on 14 Nov 2023 04:17 collapse

How do you track and improve impact and quality of work without before and after documentation?

andrew@lemmy.stuart.fun on 14 Nov 2023 04:22 collapse

Notes? Close-up wound/scar photos? Any number of ways every other doctor manages to handle it?

Nerrad@lemmy.world on 14 Nov 2023 03:03 next collapse

Let’s just all post our nudes and get it over with. You go first.

DemBoSain@midwest.social on 14 Nov 2023 04:02 next collapse

<img alt="" src="https://media.makeameme.org/created/dick-pics-for-68a9588e12.jpg">

Kissaki@feddit.de on 14 Nov 2023 04:15 next collapse

I’m not sure what do do about the before and after though. Any suggestions?

DudeDudenson@lemmings.world on 15 Nov 2023 03:16 collapse

Just stick your tummy in and then out, like in the commercials

DrMango@lemmy.world on 14 Nov 2023 05:21 collapse

This guy is on to something.

You know those AI generated “average male/female face” images you see sometimes? I feel like it could be interesting to have an “average nude body” image, but we need so many normal nudes to feed to the AI.

HeyJoe@lemmy.world on 14 Nov 2023 03:12 next collapse

Found the info I was looking for in the article. The documents did not appear to be stored with any kind of encryption… so yeah this was terrible it happened, but it happened partially due to not spending enough on IT resources to guide them on proper practices for handling documents with confidential information and violated HIPAA. As someone who works in the field all patient information must be encrypted at rest or another form of encryption on the data must exist for it to fall within compliance. On top of this only the bare minimum amount of people should have access to this data and absolutely should have audit logs for anyone accessing the data normally through the 3rd party application used to store and lookup the information.

alienzx@feddit.nl on 14 Nov 2023 05:09 next collapse

I hope they get the full fines

Treczoks@lemmy.world on 14 Nov 2023 08:35 collapse

Not that the audit logs would help anyone except listing “these files were copied by [user account used by hacker] on [date the office was hacked]”.

The real issue is that most medical offices still rely on Windows, Active Directory, and Exchange, and most of them are far, far away from up-to-date, patched versions (which actually don’t prevent hacks, but make them a bit more difficult).

HeyJoe@lemmy.world on 15 Nov 2023 01:36 collapse

I was more referencing the application that they, hopefully, use to store their documents. I really hope they are not just stored in a directory, but I guess who knows… some of the applications I have used reference everything in audit logs from when it was uploaded, to who and when it is viewed, any changes, and more. Without the application the data is encrypted at rest so the files are useless without using the application to open them. We have others that are stored within an encrypted database or use blob storage thats encrypted. Anything, but never plain old windows for storage!

[deleted] on 14 Nov 2023 03:34 next collapse

.

[deleted] on 14 Nov 2023 04:33 next collapse

.

RespectfullyNo@sh.itjust.works on 14 Nov 2023 12:33 collapse

Hackerman strikes again

Treczoks@lemmy.world on 14 Nov 2023 08:33 collapse

Let me guess without reading the article: The data was stored on an unecrypted drive connected to a computer in a network running with Windows, Active Directory, and Outlook/Exchange?

With that combo, you can just post your “secret” data on the web site, it won’t make much of a difference.

CaptFeather@lemm.ee on 15 Nov 2023 02:11 collapse

Spot on lmao

According to 8NewsNow, about a dozen women have since filed a lawsuit against the firm, claiming they did not do enough to protect their private and personal information. None of the documents posted online were encrypted