CHS Hacked via Heartbleed Vulnerability

TrustedSec obtained details of a Community Health Systems breach in which attackers exploited the OpenSSL "Heartbleed" vulnerability on a Juniper device to extract credentials from memory, access the network via VPN, move laterally, and obtain an estimated 4.5 million patient records; the report highlights Heartbleed as the confirmed initial attack vector and stresses rapid patching and detection as critical mitigations.