- British HCRG health care organization would have been struck by Ransomware Attack
- More than 2.5 TB of data offered for sale by Medusa Ransomware Gang
- Last in a series of ransomware attacks targeting health care organizations
A private health and social services supplier, the HCRG care group, would have undergone a cyber attack in the hands of the Medusa ransomware gang.
The register reported that the gang threatened to disclose information, which it claims to be stolen internal files. It seems that the data has not been encrypted by the gang, so that the organization of health care is always operational.
The MEDUSA Gang Dark website says the group has stolen 2,275 TB of data, and the information is on sale for 1.6 million sterling pounds ($ 2 million), or offering to delete data for the same amount . They then threatened to disclose information online if the ransom is not paid by February 27.
Negotiation in progress
Samples of stolen data have been disclosed and on the 35 -page published, the information seems to be driving and driving license analyzes, birth certificates, checks of history and staff rotas. These could put people affected at risk of identity, fraud or social engineering scams.
“We can confirm that we are currently investigating a computer security incident and recently identified an article on the Dark web by a group claiming responsibility,” said a Hcrg spokesperson The register.
“Our team has not observed no suspicious activity since the implementation of immediate containment measures, and we are working with external legislative specialists to investigate the incident. Our services continue to function and see patients safely and patients Those who have appointments or who must access our services should continue to do so.
Medusa also proposed to delay the publication of information for an £ 8,000 per day to keep the negotiations open.
Health care organizations are increasingly the target of cyber attacks, in particular ransomware – and are forced to pay millions of people on recovery, the successful attack costing more than $ 2.5 million to resolve.
