By NDAY  | Published March 30, 2025

In March 2025, cybersecurity faced critical challenges as social engineering, unpatched systems, and misconfigured tools opened doors for attackers. This article explores five significant cyber incidents from the month—three confirmed, one unconfirmed, and one tentative—offering actionable insights into vulnerabilities and how to strengthen defenses.

1. Fujitsu Japan Cyberattack: Risks of Unpatched Workstations

On March 27, Fujitsu Japan confirmed a malware attack exploited unpatched workstations, resulting in stolen customer data. This breach underscores the critical importance of timely software updates to mitigate cybersecurity risks.
Source: TechRadar, “Fujitsu Confirms Customer Data Stolen in Cyberattack,” March 27, 2025, https://www.techradar.com/pro/fujitsu-confirms-customer-data-stolen-in-cyberattack.

2. Western Alliance Bank Breach: Misconfigured Third-Party Tool Fallout

Western Alliance Bank reported on March 24 that a misconfigured third-party file transfer tool allowed the Clop ransomware gang to access data from 21,899 individuals, including Social Security numbers and banking details. This incident highlights the dangers of third-party tool vulnerabilities.
Source: Cybersecurity Dive, “Western Alliance Bank Says Nearly 22,000 Impacted by File Transfer Software Breach,” March 24, 2025, https://www.cybersecuritydive.com/news/western-alliance-bank-breach/711223/.

3. BianLian Ransomware Attack: Healthcare Systems Left Vulnerable

On March 24, the BianLian ransomware group targeted a healthcare provider, compromising over 120,000 patient records, likely via unpatched software or VPN weaknesses. This attack exposes the ongoing cybersecurity risks in healthcare due to outdated systems.
Source: X Post by @StoneFlyInc, March 24, 2025, “BianLian Hit 120K+ Patients,” https://t.co/IX0AxUsrUi.

4. Oracle Cloud Breach: Unconfirmed but Concerning

On March 21, a hacker named “rose87168” claimed to have stolen 6 million records from Oracle Cloud’s SSO and LDAP systems, possibly exploiting an unpatched vulnerability like CVE-2021-35587. While Oracle denies the breach, customer-verified data samples reported on March 26 lend credibility. Confirmation is still pending.
Sources: BleepingComputer, “Oracle Customers Confirm Data Stolen in Alleged Cloud Breach Is Valid,” March 26, 2025, https://www.bleepingcomputer.com/news/security/oracle-customers-confirm-data-stolen-in-alleged-cloud-breach-is-valid/; CloudSEK, “The Biggest Supply Chain Hack of 2025,” March 24, 2025, https://www.cloudsek.com/blog/the-biggest-supply-chain-hack-of-2025.

5. Ascension Healthcare Phishing Attack: A Tentative Threat

On March 17, Ascension, a major U.S. healthcare network, reported a potential phishing attack that may have compromised credentials across its 140 hospitals. Though details are limited and confirmation is pending, this incident reinforces the persistent danger of social engineering in cybersecurity.
Source: HealthITSecurity, “Ascension Data Breach Affects Multiple Hospitals After Phishing Attack,” March 17, 2025, https://healthitsecurity.com/news/ascension-data-breach-affects-multiple-hospitals-after-phishing-attack.

---

Key Cybersecurity Lessons from March 2025

The March 2025 cyber breaches—three confirmed, one unconfirmed, and one tentative—reveal recurring weaknesses: unpatched systems (Fujitsu, BianLian, possibly Oracle), misconfigured tools (Western Alliance), and social engineering tactics (Ascension). At NDAY Security, we analyze these trends to highlight the need for proactive measures: regular software updates, secure configuration management, and employee training to counter phishing and human-targeted attacks. March 2025 proves that addressing these fundamental gaps is essential to prevent major cybersecurity breaches.