Archive — US — techcrunch
Hacked health firm HCRG demanded journalist ‘take down’ data breach reporting,citing UK court order
A cybersecurity journalist rejected a U.K. court's injunction demanding the removal of articles covering a ransomware attack on HCRG, a major healthcare firm. The law firm representing HCRG claimed the articles disclosed confidential data, while the journalist argued that complying would violate U.S. free speech rights and that the injunction lacked specificity.
Key points
- HCRG, a U.K. healthcare provider, was affected by a ransomware attack.
- The Medusa ransomware gang claimed responsibility and threatened to release sensitive information.
- HCRG sought a U.K. court order to prevent the publication of related articles on DataBreaches.net.
- The journalist, using the name DissentDoe, refused the order, citing First Amendment protections.
- The injunction does not specifically name the journalist's site or the articles.
- Legal action against journalism in cybersecurity is common due to the sensitivity of information.
Why it matters
- This incident highlights ongoing tensions between cybersecurity journalism and corporate interests.
- Previous events show how legalities in various countries can affect the reporting of cybersecurity issues.
- Injunctions like this could set a precedent impacting reporting practices beyond the U.K.
- The rise of ransomware attacks and their implications on privacy and data security reflect 2025 IT trends around cybersecurity concerns.
This case underscores the critical balance between journalistic freedom and corporate confidentiality in the era of increasing cybersecurity threats, with broader implications for how such issues are addressed globally.