The Kill Security hacking group has claimed responsibility for breaching the Indian healthcare service provider, Doctor 24×7.
The group has allegedly exfiltrated sensitive data, including patient names, ages, genders, registration numbers, billing details, laboratory results, and doctor credentials.
This breach highlights the growing threat of cyberattacks on healthcare institutions and raises concerns about data security in the sector.
Details of the Breach
According to reports from HackManac, the breach was publicly announced by Kill Security, a group known for its hack-and-leak operations.
The data stolen from Doctor 24×7 includes a comprehensive range of sensitive information.
This includes personal details of patients such as names and ages, as well as medical information like laboratory results and billing details.
Additionally, the group claims to have accessed doctor credentials, which could potentially compromise further systems within the healthcare network.
The attack is particularly alarming given the sensitive nature of healthcare data and the potential for misuse of such information.
The group has set a ransom deadline of November 1, 2024, demanding payment to prevent further dissemination of the stolen data.
Who is Kill Security?
Kill Security is associated with Killnet, a notorious hacking collective known for its cyberattacks on various global entities.
Killnet has been active since at least 2021 and is infamous for targeting countries and organizations that are perceived to be adversaries of Russia.
The group has been involved in numerous cyberattacks across different sectors, often using ransomware and data exfiltration tactics to extort victims.
The group’s structure appears to be decentralized, with various subgroups operating independently but sometimes coordinating attacks.
This allows them to execute complex operations with significant impact.
Their motivations often align with geopolitical interests, particularly those supporting Russian narratives.
Healthcare organizations are increasingly becoming targets for cybercriminals due to the valuable nature of medical data.
Additionally, staff training on cybersecurity awareness can help mitigate risks associated with human error.
Also Read: