{"id":36441,"date":"2020-08-04T14:11:33","date_gmt":"2020-08-04T14:11:33","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/31455\/British-Dental-Association-Members-Targeted-By-Hackers.html"},"modified":"2020-08-04T14:11:33","modified_gmt":"2020-08-04T14:11:33","slug":"british-dental-association-members-targeted-by-hackers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/british-dental-association-members-targeted-by-hackers\/","title":{"rendered":"British Dental Association Members Targeted By Hackers"},"content":{"rendered":"
\"Dentist Image copyright<\/span> Getty Images<\/span> <\/span> <\/figure>\n

Dentists’ bank account numbers and correspondence with a trade body are feared to have been stolen by hackers.<\/p>\n

The British Dental Association has told its members that it is still not sure exactly what was accessed in a breach on 30 July. <\/p>\n

A spokeswoman told the BBC it was possible that information about patients was exposed, but was vague about the potential context.<\/p>\n

The BDA’s website has been offline since the attack.<\/p>\n

It has urged members to be cautious of any correspondence claiming to be from a bank following the incident. <\/p>\n

The organisation is contacting those it thinks had data compromised. <\/p>\n

In an email to members, the BDA referred to “logs of correspondence and notes of cases” as being among the information it said it had to be assumed stolen.<\/p>\n

A spokeswoman initially told the BBC that the notes related to insurance claims, which could include patient information. <\/p>\n

But she later clarified this and said they referred to the BDA’s “work as a trade union representing member interests” without providing further information.<\/p>\n

The BDA does not hold full patient records.<\/p>\n

Its chief executive Martin Woodrow said that an investigation was still underway.<\/p>\n

“Owing to the sophistication of these criminals, we cannot, as yet, confirm the full extent of information that has been accessed,” he added in the email memo.<\/p>\n

“We are devastated and apologise unreservedly for this breach.”<\/p>\n

Image copyright<\/span> BDA<\/span> <\/span>
Image caption<\/span> A message displayed on the BDA’s website says some systems have been taken down as a precaution <\/span> <\/figcaption><\/figure>\n

The BDA is the professional association and registered trade union organisation for dentists in the United Kingdom.<\/p>\n

It does not store members’ card details but does hold account numbers and sort codes to collect direct-debit payments.<\/p>\n

Mr Woodrow said the association was working to restore its web, telephone and internal networks following the security breach and said the Information Commissioner’s Office had been informed.<\/p>\n

Fraud ‘launchpad’<\/h2>\n

A dentist who asked to remain anonymous told the BBC they were concerned about fraudsters accessing their bank account, especially during such a period of unprecedented financial stress. <\/p>\n

“If the hackers have access to my business name, address and bank details, along with my own personal details, it could be enough to pull off a huge identity theft scam,” the dentist said.<\/p>\n

“If that happens, I may not be able to pay my staff – and at a time when we have all been working so hard to keep the practice up and running for patients during Covid-19.”<\/p>\n