FBI Warns Medical Offices: Exposed FTP Servers are a Target

The FBI issued a Private Industry Notification warning that criminals are actively scanning for and exploiting FTP servers configured for anonymous access in medical and dental environments to obtain PHI/PII—potentially to intimidate, harass, or extort organizations. The advisory highlights that many medical devices and office systems expose FTP services, recommends auditing networks for anonymous FTP servers, and ensuring any anonymous-accessible servers do not contain PHI or PII.