Archive — US — techcrunch
UK healthcare giant HCRG confirms hack after ransomware gang claims theft ofsensitive data
HCRG Care Group, a major U.K. healthcare provider, confirmed a cyberattack involving a ransomware group, Medusa, which claims to have stolen over 2 terabytes of sensitive data, including personal and medical records. HCRG is investigating the incident, has informed regulators, and is operating normally despite the breach. Medusa threatens to publish the data unless a $2 million ransom is paid.
Key points
- HCRG Care Group, a large healthcare organization in the U.K., is investigating a cybersecurity incident.
- Medusa ransomware group claims to have breached HCRG's systems, stealing over 2 terabytes of sensitive data.
- Stolen data includes personal information, medical records, financial records, and government IDs.
- HCRG is working with external forensics and has notified regulators.
- The organization has not observed suspicious activity post-breach containment measures.
- Medusa demands a ransom of $2 million to prevent the publication of the stolen data.
Why it matters
- Cybersecurity incidents like this have become more prevalent in healthcare, prompting increased regulations and security measures.
- The rise of ransomware attacks on healthcare organizations correlates with trends in cybercrime during the COVID-19 pandemic.
- The incident highlights ongoing vulnerabilities in remote desktop software, similar to previous breaches in other sectors.
The HCRG breach underscores critical vulnerabilities in healthcare cybersecurity and raises alarms about the impact of ransomware attacks on patient data security and privacy, necessitating urgent and robust responses.