Computer networks and servers of the company Aurora Health Care were infected with malware designed to capture data logs from websites that provide financial services.
The incident was discovered on January 27, 2015, and the organization took measures to remove the malicious files from its computer network. It appears that the patients' folders were not at risk, only the partners' files.
The internal investigation, which was conducted with the help of a security company, concluded that the malware was eavesdropping on information entered by users on specific workstations and specific websites.
According to the report prepared for the information of Aurora staff, the installed malware also contained scripts for monitoring social media accounts.
The company urges all partners to change the login passwords on all their personal accounts, especially for services that deal with private information. It also offers a free personal data preservation service for one year.
To prevent such incidents in the future, the company has proceeded with a general upgrade of its network security. The systems have been equipped with technology that now detects unauthorized access, while there is also encryption on the computer storage units.
Indeed, they have taken security very seriously and are preparing training and awareness programs for their partners, so that they become more informed about the risks.
Amy Rislov, head of the human resources department, provides a set of guidelines to maintain the security of both Aurora's computers and its users. Partners are advised not to access URLs or attachments that come from suspicious email addresses and to refrain from accessing social networking accounts from Aurora workstations.
