{"id":1876,"date":"2020-07-30T08:49:31","date_gmt":"2020-07-30T08:49:31","guid":{"rendered":"https:\/\/forbes.co.il\/e\/?p=1876"},"modified":"2021-06-29T13:26:46","modified_gmt":"2021-06-29T13:26:46","slug":"the-garmin-ransom-case-from-medical-data-to-military-secrets","status":"publish","type":"post","link":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/","title":{"rendered":"The Garmin Ransom Case: From Medical Data To Military Secrets"},"content":{"rendered":"\n

Most modern-day threat actors try to remain under the radar. They use different tools and techniques to infiltrate the targeted network, not trigger any alarm, map out the targeted infrastructure and steal data quietly and covertly. This is not the case when it comes to Ransomware. Once activated, Ransomware attacks are very visible and very disruptive, demanding large amounts of money for decryption of the data, and in some cases \u2013 additional payments for them to not publicly release the stolen data. The latest victim of such as attack is GPS tracker giant Garmin.<\/p>\n\n\n\n

\"\"
Garmin watch. Photo: Shutterstock<\/figcaption><\/figure>\n\n\n\n

The sensitivity of this data has already been demonstrated several years ago when a researcher used Strava data to show where military personnel do their everyday workout. Combine that data with google maps and you can identify secret military bases.<\/strong><\/em><\/p><\/blockquote>\n\n\n\n

Using the WastedLocker Ransomware, the EvilCorp group (who is known for their attacks on financial institutions) successfully halted the operations of Garmin and demanded a $10M ransom. Users of Garmin\u2019s products immediately noticed issues when trying to connect and sync their devices with Garmin\u2019s servers, but sport and healthcare trackers were not the only ones experiencing difficulties. Pilots could not download maps into their FlyGarmin app (used by Garmin GPS based instruments), the Garmin Pilot app (used for scheduling and planning flights) was experiencing difficulties as did the Garmin watches used by air force fighter pilots.  <\/p>\n\n\n\n

There are multiple privacy issues when it comes to fitness trackers. While it is great to have a detailed log of our sporting activity and watch our progress over time \u2013 what we should be asking is where is this data stored? Who can access this? The sensitivity of this data has already been demonstrated several years ago when a researcher used Strava data to show where military personnel do their everyday workout. Combine that data with google maps and you can identify secret military bases<\/a>. The problem, unfortunately, does not end with location data.<\/p>\n\n\n\n

Today\u2019s fitness trackers also allow users to enter additional medical data manually or integrate with other services and applications and share the data across multiple services. This raises multiple privacy and compliance issues on top of Personal Identifiable Information data leakage.<\/p>\n\n\n\n

Dual payment<\/strong><\/h4>\n\n\n\n

In recent months IntSights researchers have seen an increase in Ransomware \u201cdual payment\u201d attacks. These Ransomware attacks demand two payments, one for reversing the encryption and allowing the business to recover, and the second for them not to share the stolen data with the rest of the world. The silver lining in Garmin\u2019s case is that EvilCorp has (at least so far) asked money only for realising the locked files. Other notable groups however, such as the Maze team, have not been so \u201ckind\u201d.<\/p>\n\n\n\n

\"\"
The Garmin App. Photo: Shutterstock<\/figcaption><\/figure>\n\n\n\n

The attack on Garmin, which according the latest updates has been resolved (rumours are the $10M has been made) raises serious questions, not just on the personal privacy level but also for national security and operational readiness. Unfortunately, this is not the last we have seen of large-scale Ransomware attacks. Frank Abagnale (who\u2019s story was the subject of Spielberg\u2019s \u201cCatch me if you can\u201d) said in one of his talks \u201cevery breach happens because someone at the organization either did something they shouldn\u2019t have or didn\u2019t do something they should have\u201d \u2013 eluding to people falling for phishing attacks in the former and to systems not being patched or properly secure in the latter.<\/p>\n\n\n\n

No technology can bullet proof organizations from human error, and with more connected devices, sharing more information with more systems organizations and governments need to take a deeper dive into risk management, cyber threat intelligence and breach preparedness.<\/p>\n\n\n\n

Etay Maor is Chief Security Officer at IntSights<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues<\/p>\n","protected":false},"author":42,"featured_media":1884,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,8],"tags":[],"class_list":["post-1876","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lifestyle","category-technology"],"yoast_head":"\nThe Garmin Ransom Case: From Medical Data To Military Secrets - Forbes Israel<\/title>\n<meta name=\"description\" content=\"The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Garmin Ransom Case: From Medical Data To Military Secrets - Forbes Israel\" \/>\n<meta property=\"og:description\" content=\"The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues\" \/>\n<meta property=\"og:url\" content=\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\" \/>\n<meta property=\"og:site_name\" content=\"Forbes Israel\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ForbesIsrael\/\" \/>\n<meta property=\"article:published_time\" content=\"2020-07-30T08:49:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-29T13:26:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1077\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Etay Maor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ForbesIsrael\" \/>\n<meta name=\"twitter:site\" content=\"@ForbesIsrael\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Etay Maor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\"},\"author\":{\"name\":\"Etay Maor\",\"@id\":\"https:\/\/forbes.co.il\/e\/#\/schema\/person\/90a3fcff8bd39aadf392c8813b4776f1\"},\"headline\":\"The Garmin Ransom Case: From Medical Data To Military Secrets\",\"datePublished\":\"2020-07-30T08:49:31+00:00\",\"dateModified\":\"2021-06-29T13:26:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\"},\"wordCount\":637,\"publisher\":{\"@id\":\"https:\/\/forbes.co.il\/e\/#organization\"},\"image\":{\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg\",\"articleSection\":[\"Lifestyle\",\"Technology\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\",\"url\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\",\"name\":\"The Garmin Ransom Case: From Medical Data To Military Secrets - Forbes Israel\",\"isPartOf\":{\"@id\":\"https:\/\/forbes.co.il\/e\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg\",\"datePublished\":\"2020-07-30T08:49:31+00:00\",\"dateModified\":\"2021-06-29T13:26:46+00:00\",\"description\":\"The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues\",\"breadcrumb\":{\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage\",\"url\":\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg\",\"contentUrl\":\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg\",\"width\":1077,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/forbes.co.il\/e\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Garmin Ransom Case: From Medical Data To Military Secrets\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/forbes.co.il\/e\/#website\",\"url\":\"https:\/\/forbes.co.il\/e\/\",\"name\":\"Forbes Israel\",\"description\":\"The leading business magazine in the world\",\"publisher\":{\"@id\":\"https:\/\/forbes.co.il\/e\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/forbes.co.il\/e\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/forbes.co.il\/e\/#organization\",\"name\":\"Forbes Israel\",\"url\":\"https:\/\/forbes.co.il\/e\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/forbes.co.il\/e\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2022\/08\/forbes-featured-image.png\",\"contentUrl\":\"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2022\/08\/forbes-featured-image.png\",\"width\":1200,\"height\":600,\"caption\":\"Forbes Israel\"},\"image\":{\"@id\":\"https:\/\/forbes.co.il\/e\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/ForbesIsrael\/\",\"https:\/\/x.com\/ForbesIsrael\",\"https:\/\/www.instagram.com\/forbes_israel\/\",\"https:\/\/www.linkedin.com\/company\/forbes-israel\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/forbes.co.il\/e\/#\/schema\/person\/90a3fcff8bd39aadf392c8813b4776f1\",\"name\":\"Etay Maor\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/792e92375ac6851382e29627b81766962ead877b55c3a5e9ef526335360cf3d0?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/792e92375ac6851382e29627b81766962ead877b55c3a5e9ef526335360cf3d0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/792e92375ac6851382e29627b81766962ead877b55c3a5e9ef526335360cf3d0?s=96&d=mm&r=g\",\"caption\":\"Etay Maor\"},\"url\":\"https:\/\/forbes.co.il\/e\/author\/etaymaor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Garmin Ransom Case: From Medical Data To Military Secrets - Forbes Israel","description":"The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/","og_locale":"en_US","og_type":"article","og_title":"The Garmin Ransom Case: From Medical Data To Military Secrets - Forbes Israel","og_description":"The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues","og_url":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/","og_site_name":"Forbes Israel","article_publisher":"https:\/\/www.facebook.com\/ForbesIsrael\/","article_published_time":"2020-07-30T08:49:31+00:00","article_modified_time":"2021-06-29T13:26:46+00:00","og_image":[{"width":1077,"height":720,"url":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg","type":"image\/jpeg"}],"author":"Etay Maor","twitter_card":"summary_large_image","twitter_creator":"@ForbesIsrael","twitter_site":"@ForbesIsrael","twitter_misc":{"Written by":"Etay Maor","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#article","isPartOf":{"@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/"},"author":{"name":"Etay Maor","@id":"https:\/\/forbes.co.il\/e\/#\/schema\/person\/90a3fcff8bd39aadf392c8813b4776f1"},"headline":"The Garmin Ransom Case: From Medical Data To Military Secrets","datePublished":"2020-07-30T08:49:31+00:00","dateModified":"2021-06-29T13:26:46+00:00","mainEntityOfPage":{"@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/"},"wordCount":637,"publisher":{"@id":"https:\/\/forbes.co.il\/e\/#organization"},"image":{"@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage"},"thumbnailUrl":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg","articleSection":["Lifestyle","Technology"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/","url":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/","name":"The Garmin Ransom Case: From Medical Data To Military Secrets - Forbes Israel","isPartOf":{"@id":"https:\/\/forbes.co.il\/e\/#website"},"primaryImageOfPage":{"@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage"},"image":{"@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage"},"thumbnailUrl":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg","datePublished":"2020-07-30T08:49:31+00:00","dateModified":"2021-06-29T13:26:46+00:00","description":"The attack on the GPS tracker giant raises serious questions, not just on the personal privacy level but also for national security issues","breadcrumb":{"@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#primaryimage","url":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg","contentUrl":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2020\/07\/\u05de\u05e6\u05d2\u05ea1.jpg","width":1077,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/forbes.co.il\/e\/the-garmin-ransom-case-from-medical-data-to-military-secrets\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/forbes.co.il\/e\/"},{"@type":"ListItem","position":2,"name":"The Garmin Ransom Case: From Medical Data To Military Secrets"}]},{"@type":"WebSite","@id":"https:\/\/forbes.co.il\/e\/#website","url":"https:\/\/forbes.co.il\/e\/","name":"Forbes Israel","description":"The leading business magazine in the world","publisher":{"@id":"https:\/\/forbes.co.il\/e\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/forbes.co.il\/e\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/forbes.co.il\/e\/#organization","name":"Forbes Israel","url":"https:\/\/forbes.co.il\/e\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/forbes.co.il\/e\/#\/schema\/logo\/image\/","url":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2022\/08\/forbes-featured-image.png","contentUrl":"https:\/\/forbes.co.il\/e\/wp-content\/uploads\/2022\/08\/forbes-featured-image.png","width":1200,"height":600,"caption":"Forbes Israel"},"image":{"@id":"https:\/\/forbes.co.il\/e\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ForbesIsrael\/","https:\/\/x.com\/ForbesIsrael","https:\/\/www.instagram.com\/forbes_israel\/","https:\/\/www.linkedin.com\/company\/forbes-israel"]},{"@type":"Person","@id":"https:\/\/forbes.co.il\/e\/#\/schema\/person\/90a3fcff8bd39aadf392c8813b4776f1","name":"Etay Maor","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/792e92375ac6851382e29627b81766962ead877b55c3a5e9ef526335360cf3d0?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/792e92375ac6851382e29627b81766962ead877b55c3a5e9ef526335360cf3d0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/792e92375ac6851382e29627b81766962ead877b55c3a5e9ef526335360cf3d0?s=96&d=mm&r=g","caption":"Etay Maor"},"url":"https:\/\/forbes.co.il\/e\/author\/etaymaor\/"}]}},"_links":{"self":[{"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/posts\/1876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/users\/42"}],"replies":[{"embeddable":true,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/comments?post=1876"}],"version-history":[{"count":13,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/posts\/1876\/revisions"}],"predecessor-version":[{"id":1896,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/posts\/1876\/revisions\/1896"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/media\/1884"}],"wp:attachment":[{"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/media?parent=1876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/categories?post=1876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forbes.co.il\/e\/wp-json\/wp\/v2\/tags?post=1876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}