Student Health Insurer Suffers Data Breach
CyberWire Pro covered the recent story about Canadian health insurance carrier guard.me and their data breach in which a threat actor gained access to personal policy holder information by exploiting a website vulnerability, first reported by Bleeping Computer. One of the largest health insurance providers for students traveling abroad, guard.me took their website offline last week after noticing suspicious activity. Visitors are redirected to a webpage that reads, “Our IS and IT teams are reviewing measures to ensure the site has enhanced security in order to return the site to full service as quickly as possible.” The breach exposed personal student data including date of birth, gender, street address, and encrypted passwords.
K2’s CEO and Co-Founder, Pravin Madhani was tapped for commentary on the guard.me breach.