The Field Briefing — Red Flag Cyber research desk

ALLIANCE MEDINET BREACH

Alliance Healthcare Group said a third party gained unauthorised access to Alliance Medinet's membership-database system and compromised personal data of about 110,000 members, including names, personal identification numbers and contact information. Seven members' bank account information and one member's medical diagnosis may also be involved.

Who is affected: Medinet members — people covered through an employer or an insurer that uses Medinet as a third-party administrator. Affected members are being notified by Medinet, its partners or the relevant clients.

The one action that matters: treat unexpected calls, emails or texts about your policy or benefits as unproven until you check them through a channel you open yourself. Do not share passwords, one-time passcodes or banking details in response to an unsolicited request, and do not click links or make payments from such a message.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/alliance-medinet

KEYSTONE BREACH

Keystone said a third party obtained customer names, contact details, shipping addresses and order details from its official website store. Payment details, recovery phrases and private keys were not involved, and the company warns scammers may pose as its support to chase recovery phrases.

Who is affected: people who bought from Keystone's official website store. The company has not disclosed how many customers are affected.

The one action that matters: never disclose your recovery phrase or private keys to anyone — Keystone says it never asks for them, and no refund, replacement or address fix ever requires them. Treat unexpected contact about refunds, replacement devices, order problems or address corrections as unproven, and go to Keystone's official site directly.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/keystone

NEW TRAINING LESSONS — CC READY (ISC2 CC EXAM PREP)

CC Ready A4: "Incident Response, Business Continuity & Disaster Recovery" — the fourth lesson in the series is public. It separates the three plans — incident response (the attack), business continuity (the mission), disaster recovery (the systems) — with RTO vs RPO and two original practice questions with explained answers and source citations. Watch: https://www.youtube.com/watch?v=2Nz_jexAf74 Companion page: https://red-flag-cyber-site.andrewdpeat.workers.dev/training/cc-ready-a4-practice-questions

CC Ready A3: "10 ISC2 CC Practice Questions: Security Principles — With Explanations" — ten original Domain 1 practice questions with explained answers and a source citation for each. Original questions written for the series, not exam questions, no pass guarantees. Watch: https://www.youtube.com/watch?v=U44UMpKxoa4

Series playlist: https://www.youtube.com/playlist?list=PLf0keuKbjE0c Series page: https://red-flag-cyber-site.andrewdpeat.workers.dev/training/cc-ready

Stay skeptical. Check the source before you act. — Red Flag Cyber research desk