Law in the US provoked a ransomware attack

Carding Forum

Professional
Messages
2,788
Reaction score
1,176
Points
113
Personal data of residents was in the hands of RansomHub.

RansomHub ransomware group published data from the Florida Department of Health. Previously, cybercriminals threatened to publish the stolen 100 GB of data if the state does not pay an unspecified ransom amount. However, the ransomware requirements were not met.

A department spokesperson confirmed the cyberattack on July 3. RansomHub gave the state until July 5 to pay the ransom. However, the Florida government has a policy of not paying ransoms.

The Health Department confirmed that the attack affected the Vital Statistics system used to issue birth and death certificates. However, at the moment, at least 2 offices (out of 67 district departments) have started printing birth and death certificates again.

The Health Department stores some of the state's most sensitive data, including COVID-19 vaccination records, medication prescriptions, and information about patients who use medical cannabis.

DataBreaches specialists could not confirm whether RansomHub actually owns 100 GB of files, but the group's website does have a lot of internal Department data, and most of it is personal data or protected medical information.

Data analysis showed that among the stolen files, among others, are:
  • test results;
  • passport scans;
  • recipes;
  • correspondence with individuals regarding personal information;
  • employee compensation records, including personal and demographic details of each employee.

The Department coordinates its actions with law enforcement agencies and all stakeholders. It is noted that all affected parties will be notified as soon as a comprehensive assessment of the situation is completed.

Source
 
Top