{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Daily Security Review","title":"Central Kentucky Radiology’s 2024 Data Breach Affects 167,000","html":"","width":"100%","height":180,"duration":3100,"description":"In October 2024, Central Kentucky Radiology (CKR), a Lexington-based imaging provider, became the latest victim of a growing trend in healthcare cyberattacks. An unauthorized actor accessed CKR’s systems over a two-day period, compromising sensitive data for approximately 167,000 individuals. The stolen information includes names, Social Security numbers, birth dates, addresses, insurance details, and medical service records — a deeply invasive breach, though no fraud has yet been confirmed.\nWhile the nature of the attack has not been publicly confirmed, the system disruption and timing strongly suggest a ransomware event — part of a broader wave of escalating cyber threats against the healthcare sector. The breach wasn’t fully investigated and confirmed until May 2025, with notification letters mailed out to affected individuals in June. CKR is now offering 12 months of complimentary credit monitoring and guidance on identity theft protection, though many patients are left questioning how such a critical breach went undetected for months.\nIn this episode, we examine the CKR breach in the wider context of the healthcare cybersecurity crisis. Topics include:\nThe data compromised in the CKR incident and how it may be exploited\nThe suspected role of ransomware and why healthcare is a top target\nSystemic vulnerabilities across the sector: outdated software, misconfigured devices, and staffing shortages\nThe financial, operational, and reputational consequences of a breach, including regulatory exposure\nActions affected individuals should take immediately — from freezing credit to enabling two-factor authentication\nHow healthcare organizations can improve defenses, including IoT segmentation, EDR deployment, secure cloud storage, and patch management\nBroader lessons from this incident that apply across all healthcare systems, regardless of size\nCKR’s experience is a reminder that even small-to-midsize medical providers must adopt enterprise-grade cybersecurity...","thumbnail_url":"https://img.transistorcdn.com/pL79_MJFeJHamQ_ztImsGmDSMdl27VMk_30TAkieujE/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8yNzg5/ZjlhNzM5Y2M4Njli/NjkxNzgyODA2Nzhi/MDI2ZC5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}