Here is a better article on the subject. https://securityaffairs.com/149498/data-breach/colorado-hcpf-department-data-breach.html https://securityaffairs.com/1

Here is a better article on the subject. https://securityaffairs.com/149498/data-breach/colorado-hcpf-department-data-breach.html https://securityaffairs.com/149498/data-breach/colorado-hcpf... It is related to the CVE's of last May/June. Not encrypting PII at rest is malpractice. At the same time, not enough is being done to de-risk exposure, which for any person is just a matter of when not if. The vulnerability is a SQL injection vulnerability, it can be exploited by an unauthenticated attacker to gain unauthorized access to MOVEit Transfer’s database. Its the year 2023 and "Bobby Tables" is still at it... https://xkcd.com/327/ https://xkcd.com/327/