A public-facing WordPress environment at the University of Nebraska Medical Center was taken offline after cyberattackers exploited a vulnerability and gained access to a web server.
UNMC’s Brand Wise site, which houses the Omaha, Neb.-based academic medical center’s branding resources, is now back online, according to an Oct. 5 update from the organization.
The attackers exploited a WordPress vulnerability, accessed the web server and deployed malicious web-shell files, UNMC said. A forensic analysis found no evidence of sensitive data loss.
Since the incident, UNMC has implemented additional web security controls and rebuilt affected infrastructure and websites, including Brand Wise. The organization also accelerated modernization of the platform to reduce future risk.
Lisa Bazis, UNMC’s chief information security officer, praised the organization’s information security, infrastructure, web services, networking and operations teams for their response and recovery efforts.
