Following a cybersecurity incident, WS Audiology (WSA), the parent company of Widex and Signia, has discovered unauthorized parties accessing parts of its IT infrastructure. The company has disconnected selected internal and customer-facing systems to contain the threat, leading to disruptions in digital services used by hearing aid wearers and hearing care professionals, including the temporary suspension of digital services.
A similar distinction was observed during the Quest Diagnostics platform breach, where access to one service was suspended while core operations continued. The Widex MOMENT app faced significant disruptions, with some users unable to change listening settings despite their devices still amplifying sound. Other users encountered difficulties in reaching app controls, highlighting how software availability can impact everyday communication without disabling the underlying device.
The CareCloud IT breach underscores why distinguishing between these incidents is crucial: restoring service and assessing potential patient information exposure were separate tasks. Customers and clinics need additional findings before concluding about confidentiality, the extent of access, or any notification obligations stemming from this incident.
The following are indicators of compromise (IoCs): - Hashes: SHA-256, SHA-1, MD5 - Malicious domains, URLs, IP addresses: Not published - Malware filenames or families: Not identified - Exploited CVEs: Not disclosed Register your SOC with authorized threat intelligence platforms like MISP, VirusTotal, or your SIEM. Integrate threat intelligence from 16,000 SOCs.
