SAG-AFTRA Health Plan settles phishing breach class action for $950,000

In this episode, we break down the SAG-AFTRA Health Plan's $950,000 phishing settlement, Medtronic's nine-million-record breach, and the Inc Ransom attack on Sandhills Medical Foundation. We also highlight Henderson Behavioral Health's patient-centered approach and discuss practical takeaways for strengthening your organization's security posture through staff training, system patching, and incident response planning.

Episode Transcript

SPEAKER_00 (00:00):
You're listening to Pow Box Weekly, fully automated.

SPEAKER_01 (00:03):
I'm Jen.
I break into systems for aliving.

SPEAKER_00 (00:06):
Legally, most of the time.
And I'm Alex.
I spend my days making surehealthcare IT doesn't fall
apart.
Sometimes I even succeed.

SPEAKER_01 (00:15):
Big week.
We've got phishing settlements,ransomware, a massive medical
device breach, and this is thegood part, some actual humans
doing good work and behavioralhealth.

SPEAKER_00 (00:25):
Let's start with the painful one.
SAG After Health Plan justsettled a class action for
$950,000.

SPEAKER_01 (00:34):
One email, one employee clicked a phishing
link.
And now nearly 100,000 healthplan members have their data
floating around.

SPEAKER_00 (00:41):
That's what gets me.
This wasn't some sophisticatednation-state attack.
It was a phishing email.

SPEAKER_01 (00:48):
And it spawned four separate lawsuits.
Four.
Because one person didn'trecognize a fake.

SPEAKER_00 (00:54):
The takeaway here is obvious but worth repeating.
Phishing training isn'toptional.
It's not a checkbox exercise.

SPEAKER_01 (01:02):
It's the difference between a bad day and a
million-dollar settlement.
Train your people.
Test your people, then trainthem again.

SPEAKER_00 (01:10):
Speaking of people doing things right, our CEO
Hoala Greavy was in FortLauderdale last night.

SPEAKER_01 (01:16):
Henderson Behavioral Health's 10th annual VIP dinner.

SPEAKER_00 (01:24):
Dr.
Steve Roenick laid out theirfour priorities.
Patients get better, manageresources like they're your own,
be a great place to work, andmake sure everyone touched by
Henderson has an incredibleexperience.
That's refreshingly human for ahealthcare conference.
Henderson's been a valued Powboxcustomer, and it's clear why.

(01:47):
They actually care about thebasics.

SPEAKER_01 (01:49):
Which brings us to the opposite end of the
spectrum, Medtronic.

SPEAKER_00 (01:54):
The world's largest medical device manufacturer.
They filed an SEC disclosure onApril 24 after their listing
disappeared from Shiny Hunter'sextortion site.

SPEAKER_01 (02:04):
9 million records, gone.

And here's the thing (02:07):
the listing vanished right before
the ransom deadline.

SPEAKER_00 (02:11):
Which usually means one of two things.
Either way, it's a reminder thateven the biggest players aren't
immune.

SPEAKER_01 (02:23):
Medical devices are everywhere.

SPEAKER_00 (02:32):
And it's not just patient data.
It's device configurations,supply chain information,
intellectual property.

SPEAKER_01 (02:40):
The takeaway?
Size doesn't protect you.
Complexity doesn't protect you.
Good security hygiene protectsyou.

SPEAKER_00 (02:47):
Next up, Sand Hills Medical Foundation in South
Carolina.

SPEAKER_01 (02:52):
Inc.
ransom hit them.
169,761 patients affected.
The stolen files are alreadyavailable for download on the
dark web.

SPEAKER_00 (03:01):
Double extortion.
They encrypt your data andthreaten to leak it.

SPEAKER_01 (03:06):
It's the ransomware equivalent of nice data you've
got there.
Shame if something happened toit.

SPEAKER_00 (03:11):
These are community health centers.
They serve vulnerablepopulations.
And now almost 170,000 peopleare wondering what's out there
with their name on it.

SPEAKER_01 (03:22):
The practical takeaway
target, because you are.
Backups, segmentation, incidentresponse plans, none of it is
optional anymore.

SPEAKER_00 (03:32):
Let's end on something good.
Powbox sponsored Community andBeyond's New York Gathering on
May 7th.

SPEAKER_01 (03:39):
CAB is this amazing network for mental health and
allied professionals in privatepractice.

SPEAKER_00 (03:44):
Right.
If you're at a hospital, you'vegot peers down the hall.
If you're running a smallpractice, you're often on an
island.

SPEAKER_01 (03:51):
CAB bridges that gap.
And PowBox was there helpingkeep New York's behavioral
health community connected.

SPEAKER_00 (03:58):
It matters.
These clinicians are handlingsome of the most sensitive
patient information out there.
And they need securecommunication just as much as
the big systems.

SPEAKER_01 (04:08):
Maybe more.
So what ties all this together?
It's not bad luck, it's badconfigurations, blind spots, the
phishing email that got through,the ransomware that found an
open door.

SPEAKER_00 (04:20):
Most of this is fixable.
Not easy, but fixable.

SPEAKER_01 (04:24):
Train your staff, patch your systems, know where
your data lives, and whensomething does go wrong, because
it will, have a plan.

SPEAKER_00 (04:32):
That's the work.
Every week.

SPEAKER_01 (04:35):
Thanks for listening, everyone.
Stay safe out there.

SPEAKER_00 (04:38):
We'll see you next time.