ZeroFox Cyber Intelligence Daily Brief

ZeroFox Cyber Intelligence Daily Brief - January 5, 2025

ZeroFox intelligence collects, curates, and analyzes information derived from open and proprietary sources. Here is today’s daily roundup to give you and your clients an advantage over the adversary.

Brief Highlights

Modified HIPAA Rules to Better Strengthen User Data
Harley-Davidson Data Breach Exposes Personal Details of over 66,000 Customers
Suspect Accused of Hacking Trump's AT&T Call Records Arrested

Modified HIPAA Rules to Better Strengthen User Data

Source: https://thehackernews.com/2024/12/new-hipaa-rules-mandate-72-hour-data.html

What happened: The Office for Civil Rights (OCR) in the U.S. Department of Health and Human Services (HHS) issued a Notice of Proposed Rulemaking (NPRM) to modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule to strengthen electronically protected health information (ePHI). The Security Rule aims to establish national standards for the protection of individuals’ data by covered entities and their business associates, improving healthcare cybersecurity.

Why it matters: The NPRM aims to strengthen the Security Rule by requiring all implementation specifications to be mandatory, standardizing compliance timeframes, and mandating detailed documentation and risk assessments. Key proposals include developing an annual technology asset inventory, encrypting ePHI, implementing multi-factor authentication, conducting regular vulnerability scans and penetration tests, and ensuring network segmentation. The rule also emphasizes contingency planning, compliance audits, and business associate accountability, including written certifications of compliance and timely notifications for security incidents.

Harley-Davidson Data Breach Exposes Personal Details of over 66,000 Customers

Source: https://cloud.zerofox.com/intelligence/advanced_dark_web/78459

What happened: Harley-Davidson, a well-known American motorcycle manufacturer, has fallen victim to a data breach allegedly conducted by the cybercriminal group "888." The group claims to have leaked a database containing sensitive personal information of over 66,700 Harley-Davidson customers.

Why it matters: This breach exposes a wide range of personal data, including full names, addresses, email addresses, and phone numbers, all of which can be exploited for identity theft and other forms of cybercrime. At the time of writing, Harley-Davidson has yet to officially confirm the breach.

Suspect Accused of Hacking Trump's AT&T Call Records Arrested

Source: https://www.theregister.com/2025/01/01/us_army_soldier_att_call_logs/

What happened: An individual in Texas has been arrested on charges of unlawfully transferring confidential phone records. The accused is suspected of being a cybercriminal known as Kiberphant0m, who allegedly breached at least 15 telecommunications firms, including AT&T and Verizon.

Why it matters: The charges suggest Kiberphant0m knowingly sold and shared sensitive phone records without permission, which likely can lead to identity theft, extortion, and other crimes. Kiberphant0m even bragged on BreachForums about stealing AT&T call logs for President-elect Donald Trump and Vice President Kamala Harris. The individual is suspected to be connected to a larger group of cybercriminals, working together to profit from stolen data.