A day after a cyberattack on the All India Institute of Medical Sciences (AIIMS) in Delhi compromised the personal information of millions of patients, it was discovered that patient data was being sold.
Digital Desk: Hackers allegedly sold 1.5 lakh patients' personal information from Tamil Nadu's Sree Saran Medical Center on well-known forums for cybercrime and a Telegram channel where databases were for sale. CloudSEK, which foresees cyber threats, found the data leak.
The hacked third-party vendor, Three Cube IT Lab, is where the sensitive data, which includes patient information from 2007 to 2011, was reportedly obtained, according to CloudSEK. Though Three Cube may be acting as a software vendor for Sree Saran Medical Center, CloudSEK claimed it does not know of this.
For prospective customers to verify the accuracy of the data, the hackers provided a sample as proof. Names, dates of birth, addresses, guardian names, and doctor information are all part of the data that was released.
The healthcare company whose data was included in the sample was located by CloudSEK's researchers using the names of the doctors in the database. They determined that the doctors are employed by Tamil Nadu's Sree Saran Medical Center.
The data breach has now been reported to all parties involved by CloudSEK. Threat analyst Noel Varghese of CloudSEK stated, "Since the hospital's IT vendor, in this case, Three Cube IT Lab, was first attacked, we may classify this incident as a supply chain attack. The threat actor could exfiltrate Personally Identifiable Information (PII) and Protected Health Information (PHI) of their hospital clients by first gaining access to the vendor's systems.
A day after a cyberattack on the All India Institute of Medical Sciences (AIIMS) in Delhi compromised the personal information of millions of patients, it was discovered that patient data was being sold.
PATIENTS' DATA Worth
The patients' information was for sale online for USD100, which implied that numerous copies of the database would be sold. The cost was increased to USD 300 for individuals who wanted to buy the database alone. The quoted fee for anyone who wanted to resell the database was USD 400.
Continue Reading
