An entire state's population (Maine) just had its data stolen in a ransomware attack
Background:
The attack was in May 2023. It looks like data was stolen in transit, not deleted from Maine's computers. Data is still in the hands of hackers, and could be sold to sold to unscrupulous individuals or groups until THEY delete it.
The State of Maine says:
Why Am I Hearing About This Now?
The State of Maine carried out an extensive evaluation to identify the individuals whose information may have been impacted. This thorough assessment was a critical component of Maine's response, as it facilitated the State in providing notifications to those who may have been affected. This assessment of the impacted files was recently completed, and, as a result, the State is now actively notifying the impacted individuals through various communication channels, including through a nationwide media press release, letter mail and/or email. See link below.
The state says that individuals should reach out to the state for more information as to how they've potentially been affected. Maine has set up a website with details for residents here. https://www.maine.gov/moveit-global-data-security-incident/
https://mashable.com/article/maine-moveit-ransomware-attack (Mashable article)
According to the notice, the ransomware attack occurred between May 28 and May 29 of this year. Cyber criminals took advantage of a "software vulnerability" in a third-party file transfer tool known as MOVEit. The state says that this tool is "used by thousands of entities worldwide to send and receive data." During that period, an exploit in the tool was weaponized by a cybercriminal group which was able to download swaths of data from multiple state government agencies.
Just how much data was scooped up in this ransomware attack is a major cause for concern. It appears that these cybercriminals have access to many Maine residents' sensitive personal data. Exactly how each individual is affected is dependent on that person and their "association with the state." For example, if a specific person has provided certain data as part of a specific program connected to an agency, that data has potentially been breached.
Maine has confirmed that some points of data that the cybercriminals could potentially have on an individual includes their name, Social Security number, date of birth, driver’s license or state ID number, and taxpayer ID number. Medical information as well has health insurance information may also have been affected.
Once again, details are available at https://www.maine.gov/moveit-global-data-security-incident/
= new reply since forum marked as read
And I briefly considered switching to Ubuntu or some other alternative to the PC or the Mac. But if you are not someone who is sufficiently into computers (and I am one of those people who mostly just uses them as means to an end rather than an end in themselves) it is too much work and grunt work if you are not particularly knowledgeable about computers, basic use aside.
Totally hear you on that. Pride in your work does make a difference-no doubt about it.
I have never heard of OpenBSD. It is not listed here:
https://www.openlogic.com/blog/top-open-source-operating-systems-2022
I am guessing it is mostly used by computer engineers rather than lay people.
But again it probably would be more work than I am up to given all the stuff I am behind on..even commonly used terms like “disk partitions” make me run in the opposite direction
.Bookmarking for later. I haven’t had those issues recently with Windows that your brother did. I also changed system settings so I only install the necessary updates.
(I really am not interested in every new driver fix making the photoshopping of cat pics more efficient ;-/).
And I can afford to keep my comp offline most of the time. I keep my work computer strictly for work these last few years.
You seem like someone in the field. To me as a lay person cloud computing sounds like a security nightmare-of course I am a pessimistic sort of person .
My god-I am tired of those Apple os updates. For security I dare not ignore them, but they seem to have one out every other day and it uses up almost all of my mobile data each time. I ended up getting twice the usual amount of data just to keep my phone current.