Colt

Dear jmak, I deeply appreciate your last post; very helpful. Maybe you or others can add to the list of incidents; please keep me informed. As an aside, I have no access to the networks of the hospital that are connected to patient data (and I don't want to); I think eduroam is all I need. However, I need to check all my assumptions, arguments and conclusions soon. I'm happy about more input, yet I'm very grateful for what I already got. Colt

Dear jmak, Thanks. As I said at the beginning, I'm working as a researcher in a hospital, but I'm not handling any critical data. I should have been be more precise: no patient data except some anonymized aggregated patient data and some anonymized non-aggregated data from a non-patient study. I'm also handling meta-data related to collaborators and such who I'm working with, e.g. email addresses. Kind Regards Colt

Dear titch, I've been asked, but it's also a research question for me. And the legal/organizational background is a bit complicated. Colleagues who are in a similar situation in nearby hospitals are still allowed to "manage" their computers themselves, which obviously has its pros and cons. But I'm feeling specifically uneasy because, as I said, the hospital with all the patient data, etc, is a target for hackers, while I'm just in an associated research unit, and I believe there is no reason why hackers should target me directly. It would be collateral damage if I'm hacked because I'm integrated into the hospital's mdm. And there may also be malware in the supply chain of (mdm) software to the hospital, I guess. Kind Regards Colt

Dear All, I'm grateful for the responses so far. But I'm primarily interested in any risk assessment: is there any educated guess whether my fear of loosing the data due to the mdm remote wiping is well-founded? I realize that it's very difficult to predict future risk. But I was hoping that someone may point me to resources where this topic has already been discussed. (I could not find anything in the Apple/Mac support groups.) Or that someone maybe has an idea about measures that may alleviate the risk significantly. Or maybe the conclusion is that it's an elephant in the room, a known issue regarding an upcoming danger of unknown proportions? Kind Regards Colt

Dear jmak, Many thanks for the response! Yet, in my understanding, more and more frequently the malware first corrupts the (daily) backup and only then it erases/corrupts/encrypts the data?! Kind Regards Colt

Hello, I'm working as a researcher in a hospital, but I'm not handling any critical data. The hospital may be considered a target for hackers, while I do not believe that there is any reason to target me. Currently, my Apple computer is not subject to the hospital's MDM, and I wonder about the risk of data loss if it is included; in particular I fear that hackers may use the feature of the MDM to erase the data remotely. I'm looking for case reports, papers or news articles helping me to assess the risks of MDM, to compare these to the pros. I consider myself relatively well-educated in computer security, but I'm not a professional; yet I believe that I can set up things up correctly myself with the help of expert colleagues. Hoping for feedback, Colt