Cortez Lake

ARC Community Services, a Madison, Wisconsin–based provider of behavioral health, substance use disorder treatment, and family support services, has disclosed a ransomware attack involving unauthorized network access and data exfiltration. The organization detected suspicious activity on 11/4/24. Subsequent analysis confirmed that attackers accessed and exfiltrated sensitive data, including names, contact details, dates of birth, medical record numbers, protected health information (PHI), driver’s license numbers, and financial account information. ARC has offered affected individuals complimentary credit monitoring, identity theft protection, and fraud assistance as a precaution. Filings with the New Hampshire Attorney General confirmed the incident was a ransomware attack conducted by the INC Ransom group. Nearly a year later, ARC remains listed on the group’s data leak site, indicating that a ransom was likely not paid. File review finally confirmed on 8/28/25 that patient PHI was included in the exfiltrated data, with the full review completed by 11/6/25. After significant period of time, notifications letters were mailed this month, following delays attributed to the complexity of identifying affected individuals, validating the precise data elements involved, and obtaining accurate contact information. This incident underscores both the heightened risk facing healthcare and other organizations and the critical need for a unified, next-generation security and observability strategy with a platform like NIKSUN. By correlating telemetry across networks, endpoints, clinical systems, cloud services, and user activity, organizations can rapidly detect ransomware intrusion, lateral movement, and data exfiltration - while automating containment and response. Fragmented tools delay detection and increase breach impact; only an integrated, end-to-end visibility platform delivers the situational awareness, compliance defensibility, and resilience required to protect patients, providers, and community trust. Read more: https://lnkd.in/er7xWHuF #dataleakage #dataleak #dataexfiltration #databreach #cyberbreach #cyberattack #cyberthreats #cyberthreatintelligence #threatintelligence #TI #TIP #cyberdefense #cybersecurity #secops #securityoperations #securityoperationscenter #SOC #informationsecurity #infosec #informationtechnology #IT #networksecurity #endpointsecurity #applicationsecurity #appsecurity #apisecurity #aisecurity #datasecurity #cloudsecurity #NDR #EDR #XDR #SIEM #SOAR #IDS #intrusiondetection #packetcapture #PCAP #fullpacketcapture #FPC #cloudmonitoring #cloudmanagement #cloudcomputing #networkmonitoring #networkmanagement #networkoperations #netops #observability #infrastructuresecurity #malware #ransomware #bruteforce #hacking #hacks #DDOS #phishing #MITRE #compliance #GDPR #NIST #CMMC #HIPAA #niksun #ARCcommunityservices #madisonWI #wisconsin #WI #healthcare #insurance #medical #doctors #patients

3

Radian Compliance and Runtime Cyber Defense Announce Strategic Partnership. Chicago, IL — February 23 — Radian Compliance, LLC and Runtime Cyber Defense have announced a strategic partnership designed to provide organizations with the alignment of governance, risk, and compliance (GRC) with technical security control operations to meet the security requirements of frameworks including ISO and NIST. This partnership provides expertise when supporting contractual and regulatory requirements, including CPRA, GDPR and CMMC, as well as technical cybersecurity control evaluation and third-party risk management. Radian Compliance’s GRC practice, maintains a long-standing record of supporting organizations with internal audit, implementation, assessment, and consulting services for management system standards, security, and regulatory frameworks. Runtime Cyber Defense delivers hands-on technical execution and operational security services that transform compliance requirements into real-world, defensible security programs. “Organizations pursuing adherence to one or more security frameworks frequently encounter a disconnect between governance expectations and technical requirements,” said Sally Smoczynski, CISSP, Managing Partner at Radian Compliance. “By partnering with Runtime Cyber Defense, we are able to extend our proven GRC methodologies into the operational layer, helping clients to meet compliance requirements and then sustain them in practice.” “Compliance frameworks are only effective when they are backed by strong, continuously managed security operations,” noted Scott Crabb of Runtime Cyber Defense. “This partnership bridges the gap between governance and execution by aligning Radian’s deep GRC expertise with the technical requirements of security and privacy controls.” Through this collaboration, clients will benefit from: · Governance frameworks, policies and procedures aligned with validated technical controls. · Expanded GRC and technical consulting to include:   –Internal audits to include both governance and technical reviews.   –Third party risk management.   –Managed Detection and Response (MDR).   –Vulnerability management and threat mitigation.   –Secure cloud operations management to support compliant use of modern cloud environments.   –Ongoing advisory and vCISO-style support to maintain post-certification compliance. Together, Radian Compliance and Runtime Cyber Defense deliver a unified approach to compliance for cybersecurity and privacy, helping organizations avoid “checkbox compliance” and instead build sustainable, auditable, and resilient security and privacy programs. Contact Radian Compliance: Info@RadianCompliance.com https://lnkd.in/gutgjhbe   Contact Runtime Cyber Defense: Info@runtimecyber.com https://lnkd.in/g-s4m9XX

11

2 Comments

Most companies don’t struggle with CMMC because of poor security. They struggle because they start in the wrong place. Common mistakes like buying tools too early, delaying documentation, or treating CMMC like a one-time IT project can make certification far more difficult than it needs to be. We broke down the biggest CMMC preparation mistakes companies make and how to avoid them. Check out this week's blog to learn more. 👇 #CMMC #Simpatico #Compliance #Cybersecurity https://lnkd.in/ekURQa2m

1