MOVEit breach delivers bundle of 3.4 million baby records

Canada's Better Outcomes Registry & Network (BORN) fears a MOVEit breach allowed cybercriminals to copy 3.4 million people's childcare health records dating back more than a decade. BORN, which collates and uses information on "pregnancy, birth, the newborn period and childhood to improve care," says it became aware of the …

[ChoHag]

> While attacks on third-party software are difficult to prevent

Do third parties Just Happen, like the weather, or is somebody at these organisations responsible for ...

Oh never mind. I see my mistake.

[DryBones]

"While attacks on third-party software are difficult to prevent, we've taken additional measures to further strengthen our security controls to limit the potential of this type of incident happening again."

Like... burning MOVEit off their entire infrastructure?

No?

Didn't think so.

[elsergiovolador]

Correction

MOVEit breach delivers bundle of 3.4 million babypotential organ donor records

[Doctor Syntax]

It's as if FTP never existed - nor SCP, SFTP...

[CrazyOldCatMan]

It's as if FTP never existed - nor SCP, SFTP...

But, but, but.. it's 'da cloud' where everything is safe!

(Safe for datamining, criminals, advertisers[1] and similar ne'er-do-wells)

[1] Yes, yes, I know that criminals and advertisers share a similar venn space..

[ecofeco]

Have databases become too complex for mere mortals?

Is creating an in house database now so far beyond the realm of the average organization that is has to be purchased in toto because... rocket surgery?

Ah, I keep forgetting that Rube Goldberg dev is the fashion of the day.

[Bitsminer]

state of mind

...we've taken additional measures to further strengthen...

I'm inclined to think they just started taking their first measures, not adding new ones.

Then the question comes to mind: why didn't they think of these "measures" previously? Were they just not imaginative enough? Or in too much of a hurry to care?

One obvious measure is to limit the list of acceptable IP addresses to avoid a compromise by rando hackers.

If you expect your software to be vulnerable, you can take better care of your data. Simple.