Heart Data Exposed
Hackers used social engineering to break into apps used by heart-monitor maker iRhythm, exposing data on at least 360,000 people.
Key terms
AP Cybersecurity alignment
- 2.1.A.4Intimidation is when adversaries state negative consequences if demands aren’t met.Learning objective: Identify social engineering attacks.
- 2.1.C.3In the initial-access phase of an attack, adversaries establish a foothold on the target’s computer, often through social engineering or compromised or weak credentials.Learning objective: Describe the phases of a cyberattack.
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
AP Networking alignment
- 4.1.A.2Violations of the CIA triad often occur together, resulting in greater impact. Understanding the full scope of an incident requires investigating what happened, who was affected, and how data or services were impacted.…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.