Rhysida pwns two US healthcare orgs, extracts over 300K patients' data

Two US healthcare providers — Kansas-based Sunflower Medical Group (220,968 affected) and Rhode Island's Community Care Alliance (over 114,000 affected) — disclosed breaches in which attackers exfiltrated sensitive personal and medical information (names, addresses, DOBs, SSNs, driver’s license numbers, diagnoses, lab results, insurance and billing data). The Rhysida ransomware gang claims responsibility and posted terabytes of data (including alleged SQL databases and identity documents) on its leak site; victim notices did not explicitly state ransomware, and organizations have offered credit monitoring and said they hardened security.