Report: Community Health Hack Linked To Heartbleed OpenSSL Hole

TrustedSec reported that the Community Health Services breach resulted from exploitation of the Heartbleed OpenSSL flaw in a Juniper VPN appliance, which allegedly allowed attackers to harvest VPN credentials, access CHS’s network, and exfiltrate patient data affecting an estimated 4.5 million individuals; Bloomberg reported possible Chinese-linked actors without presenting firm evidence. The article also warns that many applications and SSL VPNs using vulnerable OpenSSL components remained unpatched, increasing exposure.