- Threat actor claims to have stolen 1.24 million sensitive health records from Doctor Alliance
- The data disclosed includes prescriptions, diagnoses, insurance details and personal contact details.
- Breach risks include fraud, extortion, lawsuits and long-term reputational damage.
Doctor Alliance, an American health technology company, reportedly suffered a cyberattack that caused it to lose more than a million sensitive files.
Security researchers from Cybernews spotted a new post on an underground hacking forum, in which a malicious actor claimed to have stolen 1.24 million files, totaling 353 gigabytes, from Doctor Alliance.
The hacker demanded $200,000 in exchange for deleting the files and downloaded a small 200MB sample, which the Cybernews The team analyzed and found that it contained prescriptions, treatment plans, check-up summaries, hospital orders, people’s names, health insurance application numbers, home addresses, phone numbers, diagnoses and doctors’ names.
Huge potential for abuse
Doctor Alliance has not yet commented on the news. If the stolen records turn out to be legitimate, it could pose a major risk to the company’s customers, as the information can be used in all kinds of social engineering and fraud attacks.
With 1.24 million health records stolen, attackers can commit targeted identity theft, insurance fraud, and extortion by threatening to release sensitive medical information. Aggregated data enables doxxing (publicly revealing a person’s private personal information online without consent), harassment, and blackmail of high-value victims.
Attackers can file false claims, obtain prescriptions or controlled substances, and exploit medical histories to craft convincing social engineering or phishing campaigns.
Sometimes, hackers combine the leaked data with that from previous leaks, creating detailed victim profiles, which can help them take control of other accounts through credential stuffing and brute forcing. Finally, nation states or criminal groups may use the files for long-term surveillance, targeted scams, or discriminatory misuse.
On top of all this, Doctor Alliance could face class action lawsuits and regulatory fines. All things combined, major leaks like this hurt the bottom line, erode brand image, and lose customers.
Doctor Alliance specializes in document management and billing optimization solutions for physicians and home care agencies. Its headquarters are in Dallas, Texas.
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
