Tag Archive for: hacked

Rhysida ransomware group hacked Abdali Hospital in Jordan

/in


Rhysida ransomware group hacked Abdali Hospital in Jordan

Pierluigi Paganini
December 26, 2023

The Rhysida ransomware group claimed to have hacked Abdali Hospital, a multi-specialty hospital located in Jordan.

Abdali Hospital is a multi-specialty hospital located in the modern development of Al-Abdali, Amman, Jordan. Abdali Hospital provides care to patients in numerous specialties. Apart from its general surgery section, it has specialists in orthopedics and rheumatology, gynecology, urology and endocrinology, neurology, nephrology, pulmonology, internal medicine, oncology, infectious disease, and anesthesiology. The hospital also offers aesthetic specialties including plastic surgery and dermatology. Finally, there is a women’s health center with a specialty in breast cancer.

The Rhysida ransomware group claimed to have breached the Abdali Hospital in Jordan and added it to the list of victims on its Tor leak site.

The group published images of stolen documents as proof of the hack. Leaked images include ID cards, contracts and more.

“With just 7 days on the clock, seize the opportunity to bid on exclusive, unique, and impressive data. Open your wallets and be ready to buy exclusive data. We sell only to one hand, no reselling, you will be the only owner!” reads the announcement published on the Tor leak site of the Rhysida ransomware group.

abdali Hospital

The ransomware group claims to have stolen a substantial trove of ‘sensitive data’ and is auctioning it for 10 BTC. As usual, the Rhysida ransomware operators plan to sell the stolen data to a single buyer. The gang will publicly release the data over the seven days following the announcement.

At the end of November, the ransomware group claimed to have hacked King Edward VII’s Hospital in London.

The group also claimed the hack of the British Library and China Energy Engineering Corporation.

The Rhysida ransomware group has been active since May 2023. According to the gang’s Tor leak site, at least 62 companies are victims of the operation.

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. The…

Source…

Hunters International ransomware gang claims to have hacked the Fred Hutch cancer center

/in


Hunters International ransomware gang claims to have hacked the Fred Hutch Cancer Center

Pierluigi Paganini
December 16, 2023

The Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch).

Another healthcare organization suffered a ransomware attack, the Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch).

The ransomware gang has added the organization to its dark web leak site and is threatening the victim to leak the alleged stolen data.

Fred Hutchinson Cancer Research Center is an independent, nonprofit research institute based in Seattle, Washington. Its mission is to improve the lives of people worldwide through research, clinical care and education.

The center’s research focuses on cancer prevention, diagnosis, treatment and survivorship. Fred Hutch investigators are making groundbreaking discoveries in cancer genomics, immunotherapy, precision medicine and other fields.

The organization operates a network of clinical sites in the US.

Earlier in December, Fred Hutch disclosed a cyber attack that took place on November 19, 2023. Threat actors had access to its infrastructure.

The Seattle Times reported that Fred Hutch patients started receiving email threats following cyberattack.

“Then this week, the spam emails started to arrive. The threats were sent to a number of former and current Fred Hutch patients — as well as some who have received care from Hutch partner UW Medicine — and claimed the names, Social Security numbers, phone numbers, medical history, lab results and insurance history of more than 800,000 patients had been compromised.” reported the Seattle Times.

“If you are reading this, your data has been stolen and will soon be sold to various data brokers and black markets to be used in fraud and other criminal activities,” the alleged hackers wrote, according to several emails shared with The Seattle Times.”

Fred Hutch
Robert M. Arnold Building, Fred Hutchinson Cancer Research Center.

The organization immediately started the incident response procedure, it took impacted systems offline, a circumstance that suggests that Fred Hutch was the…

Source…

Ukraine’s Largest Phone Operator Hacked in “Act of War”

/in


Kyivstar, Ukraine’s leading mobile network operator, is experiencing a significant shutdown allegedly due to a cyber-attack.

The company, owned by Amsterdam-based Veon, warned on December 12 that it had suffered a “powerful” cyber-attack that caused a technical failure, rendering internet access and mobile communications temporarily unavailable for its customers.

Although Kyivstar did not make directly attribute the attack initially, its director general later told Agence France Presse (AFP) that the firm considered the attack to be linked with the war against Russia.

In a Facebook post, Kyivstar said it was investigating the issue with law enforcement agencies, had reported it to Ukrainian state services, and was “working to eliminate the consequences and restore communications as soon as possible.”

“The most important thing is that, as of now, the personal data of subscribers has not been compromised. Our team will definitely compensate those subscribers who had no connection or could not use our services,” the firm added on social media.

“Yes, our enemies are cunning. But we are ready to face any challenges, overcome them and continue working for Ukrainians.”

Ukraine’s government confirmed to AFP that it started investigating the incident and that Russia was “suspected” of being behind it.

Both Cloudflare, a content delivery network (CDN) provider, and Netblocks, an internet monitoring firm, noticed disruptions on the Kyivstar internet network on December 12.

Additionally, Ukrainian payment system Monobank reported being targeted by a distributed denial-of-service (DDoS) attack just a few hours after Kyivstar’s social media post.

At the time of writing, there is no evidence that these two events are related.

Source…