Medical Facility Hacked Through HVAC Vendor

In the first week of August 2021, was contacted by a threat actor who claimed they had penetrated and attempted to extort ENE Systems, an HVAC vendor. According to the threat actor, they still had access to ENE Systems’ networks and clients after ENE Systems became aware of the breach. One of these clients was Boston Children’s Hospital. ENE Systems allegedly claimed that, though they were aware of the breach, they were unconcerned about the risks it posed to their networks and clients.

Click to read the full briefing.