{"id":2775,"date":"2023-09-01T13:57:03","date_gmt":"2023-09-01T13:57:03","guid":{"rendered":"https:\/\/kleetos.com\/?p=2775"},"modified":"2025-07-15T04:05:08","modified_gmt":"2025-07-15T04:05:08","slug":"cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them","status":"publish","type":"post","link":"https:\/\/brightsquid.com\/us\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/","title":{"rendered":"Cybercriminals aren&#8217;t just stealing one password &#8211; they&#8217;re taking all of them"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2775\" class=\"elementor elementor-2775\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-658cdc08 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"658cdc08\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-62eebfc0\" data-id=\"62eebfc0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ddbd2a9 elementor-widget elementor-widget-image\" data-id=\"ddbd2a9\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"812\" height=\"372\" src=\"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg\" class=\"attachment-full size-full wp-image-3039\" alt=\"\" srcset=\"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg 812w, https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog-300x137.jpg 300w, https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog-768x352.jpg 768w, https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog-650x298.jpg 650w\" sizes=\"(max-width: 812px) 100vw, 812px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-452423cc elementor-widget elementor-widget-text-editor\" data-id=\"452423cc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"has-padding-top\">Last year,\u00a0<a href=\"https:\/\/enterprise.verizon.com\/resources\/executivebriefs\/2019-dbir-executive-brief.pdf\">Verizon reported<\/a>\u00a0that almost a quarter of healthcare data breaches were initiated with the purpose of accessing credentials. Cyber criminals are after your login credentials. They recognize the value of patient information and the privileged access that comes with caring for that information. This adds further risk to the potential of suffering a cyber breach, such as a ransomware attack, and highlights the need to implement a perpetual privacy compliance system in any healthcare clinic or facility.<br \/><br \/><\/p><p><b>Attackers will take everything they can from your network.<\/b><\/p><p>When\u00a0<a href=\"https:\/\/securityboulevard.com\/2020\/01\/the-hidden-cost-of-ransomware-wholesale-password-theft\/\">Virtual Care Provider Inc. (VCPI) was hit with a ransomware attack<\/a>\u00a0in November 2019, they quickly focused on recovery and risk mitigation. The attack resulted in them having to<b>decline services to their clients that served 2,400 nursing homes<\/b>. While the company tried to recover from the attack many of its elderly health care facilities, patient records, and phone services were cut off.\u00a0<\/p><p>During the data security breach, the attackers released malware into VCPI\u2019s system which obtained multiple passwords from the infected systems. They were able to<b>steal over 300 passwords from websites that the employees at the company used to log in, including:\u00a0<\/b><\/p><ul><li>Medical supply services<\/li><li>Direct deposit and Medicaid billing portals\u00a0<\/li><li>Prescriptions management services\u00a0<\/li><li>Numerous online payment processing services\u00a0<\/li><li>Online content distribution networks\u00a0<\/li><li>Password management and sharing sites<\/li><\/ul><p><b>\u201cWe\u2019re working on it\u201d doesn\u2019t keep criminals out of your patient data<\/b><\/p><p>VCPI was working on bettering their security but hadn\u2019t had time to complete everything before the attackers hit. The organization said \u201cWe did a risk assessment that was pretty spot on, we just needed more time to work on it before the hit.<b>We were doing the right things just not fast enough\u2026once you\u2019re targeted it is pretty tough to defend.\u201d<\/b><\/p><p><b>The consequences add up to scary<\/b><\/p><p>The information that these cyber criminals were able to obtain can have very serious consequences on VCPI. These criminals can commit identity theft, sell prescription drugs, impersonate doctors, and more.\u00a0<\/p><p>Bottom line: if your clinic is hit with a ransomware attack, the clinic<b><i>\u201cshould assume that all credentials stored anywhere on the local network (including those saved inside web browsers and password managers) are compromised and need to be changed.\u201d<\/i><\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Last year,\u00a0Verizon reported\u00a0that almost a quarter of healthcare data breaches were initiated with the purpose of accessing credentials. Cyber criminals are after [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":3039,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2775","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-brightsquid-blog"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.1 (Yoast SEO v24.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Safeguard Your Clinic Credentials | HIPAA Compliant Email<\/title>\n<meta name=\"description\" content=\"Reports indicate that a cyber attack compromises all your clinic login credentials, learn why its important to change all of them after an attack.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybercriminals aren&#039;t just stealing one password - they&#039;re taking all of them\" \/>\n<meta property=\"og:description\" content=\"Reports indicate that a cyber attack compromises all your clinic login credentials, learn why its important to change all of them after an attack.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/\" \/>\n<meta property=\"og:site_name\" content=\"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-01T13:57:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-15T04:05:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"812\" \/>\n\t<meta property=\"og:image:height\" content=\"372\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Candace Jensen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Candace Jensen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/brightsquid.com\/us\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/\",\"url\":\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/\",\"name\":\"Safeguard Your Clinic Credentials | HIPAA Compliant Email\",\"isPartOf\":{\"@id\":\"https:\/\/brightsquid.com\/us\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg\",\"datePublished\":\"2023-09-01T13:57:03+00:00\",\"dateModified\":\"2025-07-15T04:05:08+00:00\",\"author\":{\"@id\":\"https:\/\/brightsquid.com\/us\/#\/schema\/person\/207722aac73bbae1618de464c271cbee\"},\"description\":\"Reports indicate that a cyber attack compromises all your clinic login credentials, learn why its important to change all of them after an attack.\",\"breadcrumb\":{\"@id\":\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#primaryimage\",\"url\":\"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg\",\"contentUrl\":\"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg\",\"width\":812,\"height\":372},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/brightsquid.com\/us\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybercriminals aren&#8217;t just stealing one password &#8211; they&#8217;re taking all of them\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/brightsquid.com\/us\/#website\",\"url\":\"https:\/\/brightsquid.com\/us\/\",\"name\":\"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/brightsquid.com\/us\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/brightsquid.com\/us\/#\/schema\/person\/207722aac73bbae1618de464c271cbee\",\"name\":\"Candace Jensen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/brightsquid.com\/us\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bd53fd0c0e6ca6169ca1c900eaf47d81?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bd53fd0c0e6ca6169ca1c900eaf47d81?s=96&d=mm&r=g\",\"caption\":\"Candace Jensen\"},\"description\":\"Candace Jensen is the Director of Privacy at Brightsquid, where she brings deep expertise in privacy compliance, healthcare operations, and leadership. A certified information privacy professional and seasoned compliance advisor, Candace supports healthcare organizations in navigating the complex landscape of Federal and Provincial privacy legislation, including the HIA, PIPA, POPA, and ATIP. She\u2019s known for her strategic approach to privacy impact assessments, breach prevention, and information security compliance. As a true privacy champion, Candace leads with clarity, care, and a touch of humor\u2014because even privacy policies can be engaging with the right mindset.\",\"url\":\"https:\/\/brightsquid.com\/us\/author\/candace\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Safeguard Your Clinic Credentials | HIPAA Compliant Email","description":"Reports indicate that a cyber attack compromises all your clinic login credentials, learn why its important to change all of them after an attack.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/","og_locale":"en_US","og_type":"article","og_title":"Cybercriminals aren't just stealing one password - they're taking all of them","og_description":"Reports indicate that a cyber attack compromises all your clinic login credentials, learn why its important to change all of them after an attack.","og_url":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/","og_site_name":"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches","article_published_time":"2023-09-01T13:57:03+00:00","article_modified_time":"2025-07-15T04:05:08+00:00","og_image":[{"width":812,"height":372,"url":"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg","type":"image\/jpeg"}],"author":"Candace Jensen","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Candace Jensen","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/brightsquid.com\/us\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/","url":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/","name":"Safeguard Your Clinic Credentials | HIPAA Compliant Email","isPartOf":{"@id":"https:\/\/brightsquid.com\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#primaryimage"},"image":{"@id":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#primaryimage"},"thumbnailUrl":"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg","datePublished":"2023-09-01T13:57:03+00:00","dateModified":"2025-07-15T04:05:08+00:00","author":{"@id":"https:\/\/brightsquid.com\/us\/#\/schema\/person\/207722aac73bbae1618de464c271cbee"},"description":"Reports indicate that a cyber attack compromises all your clinic login credentials, learn why its important to change all of them after an attack.","breadcrumb":{"@id":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#primaryimage","url":"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg","contentUrl":"https:\/\/brightsquid.com\/us\/wp-content\/uploads\/sites\/2\/2023\/09\/secure-clinic-messaging-cybercriminals-arent-stealing-just-one-password-brightsquid-blog.jpg","width":812,"height":372},{"@type":"BreadcrumbList","@id":"https:\/\/brightsquid.com\/cybercriminals-arent-just-stealing-one-password-theyre-taking-all-of-them\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/brightsquid.com\/us\/"},{"@type":"ListItem","position":2,"name":"Cybercriminals aren&#8217;t just stealing one password &#8211; they&#8217;re taking all of them"}]},{"@type":"WebSite","@id":"https:\/\/brightsquid.com\/us\/#website","url":"https:\/\/brightsquid.com\/us\/","name":"Brightsquid US | Simplify Clinic Operations, Prevent Privacy Breaches","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/brightsquid.com\/us\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/brightsquid.com\/us\/#\/schema\/person\/207722aac73bbae1618de464c271cbee","name":"Candace Jensen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/brightsquid.com\/us\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/bd53fd0c0e6ca6169ca1c900eaf47d81?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bd53fd0c0e6ca6169ca1c900eaf47d81?s=96&d=mm&r=g","caption":"Candace Jensen"},"description":"Candace Jensen is the Director of Privacy at Brightsquid, where she brings deep expertise in privacy compliance, healthcare operations, and leadership. A certified information privacy professional and seasoned compliance advisor, Candace supports healthcare organizations in navigating the complex landscape of Federal and Provincial privacy legislation, including the HIA, PIPA, POPA, and ATIP. She\u2019s known for her strategic approach to privacy impact assessments, breach prevention, and information security compliance. As a true privacy champion, Candace leads with clarity, care, and a touch of humor\u2014because even privacy policies can be engaging with the right mindset.","url":"https:\/\/brightsquid.com\/us\/author\/candace\/"}]}},"_links":{"self":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/posts\/2775"}],"collection":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/comments?post=2775"}],"version-history":[{"count":8,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/posts\/2775\/revisions"}],"predecessor-version":[{"id":3046,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/posts\/2775\/revisions\/3046"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/media\/3039"}],"wp:attachment":[{"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/media?parent=2775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/categories?post=2775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/brightsquid.com\/us\/wp-json\/wp\/v2\/tags?post=2775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}