Home addresses, social security numbers & sensitive medical data on 500,000 French patients leaked online after hack – reports — RT World News


Sensitive medical records on nearly 500,000 patients in France have been stolen in a major cyber attack on dozens of healthcare labs, landing online after an alleged dispute between the hackers, according to media reports.

A file containing names and contact details on 491,840 people has made the rounds online since at least earlier this month, according to French cybersecurity journalist Damien Bancal, who runs the Zataz blog. The data includes home addresses, phone numbers, emails, social security numbers and other sensitive medical information pertaining to medications, pregnancy and diseases such as HIV.

While Bancal first noted the hack in a February 14 blog post, AFP and the French daily Liberation followed up more recently, with the latter finding the data was likely stolen from roughly 30 medical labs located around northwestern France.

“We can find this file in seven different places on the internet,” Bancal told AFP on Tuesday, adding that although hackers initially negotiated for the data through a Telegram chat, the stolen material was later released for free after a dispute among the blackhatters.  

Data on 500,000 people is already huge and nothing prevents me from thinking that the hackers still have a lot more.



Also on rt.com
Hackers threaten to leak massive trove of ‘before & after’ plastic surgery photos, warn they’re ‘not a pleasant sight’


Though AFP’s requests for comment to French authorities have so far gone unanswered, Bancal observed that the country’s CERT cyber crime agency appears to have acknowledged the breach earlier this month. The outfit posted a notice to the website of the French Ministry of Health warning that login credentials for up to 50,000 “hospital center agents” had been swiped and put up for sale on February 4, adding that while “it is difficult to precisely describe the origin of this leak,” it could allow hackers to access healthcare networks. 

Bancal also claims to have personally contacted one of the people still attempting to sell the purloined records through the online blackmarket. He said the person asked for “at least…

Source…