Intuitive Surgical Faces Cyberattack Compromising Business Data
TL;DR
Intuitive Surgical Discloses Phishing Attack
Intuitive Surgical, a surgical robotics firm, reported a cybersecurity incident stemming from a phishing attack. The breach compromised customer and employee data after an unauthorized third party gained access to the company's internal business administrative network. A statement posted on their website confirmed the incident. The company activated its incident response protocols upon discovery. MedTech Dive also covered the incident.
Data Compromised
The compromised data includes customer business and contact information, along with employee and corporate data. The Register notes that the company did not specify when the attack occurred or when it was discovered. Intuitive's statement indicates that the intrusion had no operational impact on its platforms or the hospitals that use its robotic systems. Cybersecurity Dive reported the breach included customer contact details and employee information.
Operational Impact
Intuitive Surgical emphasized that its da Vinci, Ion and digital platforms were unaffected and remain safe and operational. Medical Device Network reported that the company "quickly activated" its incident response protocols. The company stated, according to reporting by Cybersecurity Dive, that its network infrastructure is segmented. The Register confirms that hospital customer networks remain separate from Intuitive networks and are managed by customers’ IT teams.
Security Measures and Response
Intuitive Surgical stated they took "immediate action" to contain the breach and begin an investigation. The Register indicates that the company has notified data privacy regulators. The company is also reviewing security protocols and reminding employees of online security training, according to MedTech Dive. The company also pledged to share updates as the investigation continues.
Parallels to Stryker Cyberattack
This incident follows a recent cyberattack on Stryker, another medical device maker, where a global network disruption occurred. MedTech Dive reported that the Stryker attack led to disruptions in order processing, shipping, and manufacturing. An Iran-linked threat actor, Handala, claimed responsibility for the Stryker attack. The Register notes that Cisco's Talos indicated that the Stryker intrusion "likely does not indicate that the health care sector is at any higher or specific risk".
Expert Insights
Ensar Seker, CISO at SOCRadar, told The Register that even advanced technology companies can be compromised when a single credential is exposed. He added that phishing remains effective because it targets people rather than technology. Medical Device Network also covered the disruption to Stryker’s operations.
In light of these events, it's crucial to enhance your online security. At squirrelvpn.com, we offer cutting-edge VPN technology and insights to keep you informed and protected. Explore our in-depth articles, news updates, and tips for enhancing your online security and privacy. Contact us at squirrelvpn.com to learn more.
