NextGen Healthcare (Mirth Connect) Data Breach
NextGen Healthcare (Mirth Connect) experienced a data breach that was reported on May 20, 2024. NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.
Key Facts
- Organization
- NextGen Healthcare (Mirth Connect)
- Date Reported
- May 20, 2024
- Incident Type
- ransomware
- Industry
- Technology
- Severity Score
- 6/10
- Confidence Level
- high
- Tags
Source
View original source - External link to primary source documentation
Understanding ransomware Incidents
Ransomware attacks encrypt organizational data and demand payment for recovery. They often involve data exfiltration before encryption, enabling double extortion. Organizations should maintain offline backups and incident response plans.