Mindcore says it stopped a live cyberattack on a medical practice in under 3 minutes

Mindcore Technologies says it contained a live cyberattack against a multi-location medical practice in under three minutes, blocking an attempted takeover of bank accounts and credit cards with no financial loss. The incident underscores how fast business email compromise can move and why minutes, not hours, decide the outcome.

Why it matters: - Business email compromise can move from inbox access to financial theft in minutes. - The incident ended with zero dollars lost, no unauthorized account activity, and no apparent spread beyond the initial intrusion. - Healthcare remains a frequent target, and the FBI’s 2025 Internet Crime Report said the sector faced more reported cyber threats than any other critical infrastructure sector.

What happened: - Mindcore Technologies said it contained a live cyberattack against a multi-location medical practice. - The attacker gained access to an employee email account and tried to move on the practice’s bank accounts and credit cards. - Mindcore’s security operations team shut down the attack in under three minutes after the alert fired. - The practice’s staff regained email access the same day.

The details: - Mindcore said the response included blocking access, revoking active sessions, and resetting credentials. - A same-day review of the practice’s environment found no other accounts compromised. - Financial institutions confirmed no unauthorized activity on any account. - Mindcore described its detection and response approach as a layered stack built on the assumption that attackers will get in. - The company does not publicly disclose the composition of that stack. - Mindcore said the secrecy is meant to make it harder for attackers to map the defenses they would need to evade.

Between the lines: - The company is framing speed as the main security advantage, not just prevention. - CEO Matt Rosenthal said many businesses learn about similar attacks from their bank weeks later and after six-figure losses. - Rosenthal said Mindcore’s goal is to detect in seconds, contain in minutes, and return the client to a normal business day. - The FBI’s 2025 Internet Crime Report said business email compromise caused more than $3 billion in reported losses in 2025, with the average incident costing about $123,000.

What's next: - Mindcore is urging organizations to enforce multi-factor authentication everywhere, retire dormant accounts, and use continuous monitoring for business email. - The company is positioning rapid containment as the key control for attacks that are already inside the network. - The broader warning is that financial damage can be avoided only if suspicious activity is caught almost immediately.

The bottom line: - In this case, a fast response appears to have stopped a costly email-based attack before money left the practice's accounts.