{"id":167714,"date":"2024-08-28T20:17:08","date_gmt":"2024-08-28T20:17:08","guid":{"rendered":"https:\/\/securityaffairs.com\/?p=167714"},"modified":"2024-08-28T20:17:10","modified_gmt":"2024-08-28T20:17:10","slug":"blacksuit-group-attack-young-consulting","status":"publish","type":"post","link":"https:\/\/securityaffairs.com\/167714\/data-breach\/blacksuit-group-attack-young-consulting.html","title":{"rendered":"Young Consulting data breach impacts 954,177 individuals"},"content":{"rendered":"
<\/div>\n

A ransomware attack by the BlackSuit group on Young Consulting compromised the personal information of over 950,000 individuals.<\/h2>\n\n\n\n

Software solutions provider Young Consulting disclosed a data breach impacting 950,000 individuals following a BlackSuit<\/a> ransomware attack. <\/p>\n\n\n\n

On April 13 the company \u201cbecame aware of technical difficulties\u201d that impacted its infrastructure. Attackers gained access to the company network between April 10, 2024, and April 13, 2024, and stole certain files. <\/p>\n\n\n\n

“On April 13, 2024, Young Consulting became aware of technical difficulties in our computer environment. We immediately took certain systems offline to contain the incident and launched an investigation, with the assistance of a cybersecurity forensics firm, to determine the nature and scope of the event.” reads a notice<\/a> of data breach published by the company. “The investigation determined that an unauthorized actor gained access to Young Consulting\u2019s network between April 10, 2024, and April 13, 2024, and downloaded copies of certain files.” <\/em><\/p>\n\n\n\n

Compromised data varies by individual and may include a combination of certain individuals\u2019 names, Social Security numbers, date of birth, and insurance policy\/claim information.<\/p>\n\n\n\n

The company maker did not share details about the attack. According to the data breach notification<\/a> shared by the company with the Maine Attorney General\u2019s Office, the incident impacted 954,177 people.<\/gwmw><\/p>\n\n\n\n

The investigation conducted by Young Consulting revealed that information related to certain data owners, including Blue Shield, was accessed by an unauthorized actor during a security breach. The company is still reviewing the impacted files and identifying affected individuals. On June 28, 2024, Young Consulting confirmed the breach to Blue Shield and has started notifying the individuals whose information may have been compromised.<\/gwmw><\/p>\n\n\n\n

“Blue Shield of California received notification from Young Consulting, Inc., a third-party vendor who provides risk management services, that it experienced a data security event which potentially impacted the health plan members\u2019 information.” reads an incident\u00a0notice<\/a>\u00a0published by Blue Shield.<\/em><\/p>\n\n\n\n

The software maker offers one year of free credit monitoring services to the impacted individuals.<\/p>\n\n\n\n

\"BlackSuit<\/a><\/figure>\n\n\n\n

In May, the BlackSuit ransomware group added Young Consulting to the list of victims on its Tor leak site. The ransomware gang claimed the theft of the following information:<\/p>\n\n\n\n