September 29, 2023

Hackers who breached an Israeli hospital close to Tel Aviv final month mentioned they began leaking stolen knowledge as a result of no ransom was paid.

The ransomware assault on Mayanei Hayeshua Medical Heart resulted within the shutdown of its administrative pc techniques, main the hospital to redirect new sufferers and people requiring emergency care to different medical facilities.

The Ragnar Locker ransomware gang claimed duty for the assault this week and mentioned it’s releasing the primary batch of the hospital’s inner recordsdata. Israeli information outlet JNS has reported that the record of affected sufferers doubtlessly contains high authorities officers, lawmakers and senior rabbis.

The disclosed knowledge set is claimed to comprise “a variety of private data, inner emails, funds, medical playing cards, and different extremely delicate knowledge,” in keeping with a post from the group shared by the MalwareHunterTeam account on social media web site X.

The hackers mentioned they didn’t encrypt the recordsdata on the hospital’s community as a result of they didn’t need to harm medical gear.

The Document could not independently confirm the hackers’ claims and the authenticity of the stolen knowledge. Mayanei Hayeshua Medical Heart didn’t reply to a request for remark.

Israeli Prime Minister Benjamin Netanyahu acquired remedy for prostate-related points at Mayanei Hayeshu hospital in 2015. It stays unclear whether or not his information had been amongst these uncovered by hackers.

Israel’s privateness safety authority, which investigated the incident, confirmed to native media that some delicate private data certainly had been uncovered however didn’t specify what sort of information was stolen.

The Ragnar Locker hackers mentioned the hospital refused to barter and did not pay the ransom, which was beforehand reported to be “tens of tens of millions of shekels” (1 shekel is about 0.25 {dollars}).

“We tried to attract their consideration to the community points and known as them for dialogue,” the hackers mentioned. “After a number of makes an attempt to contact the administration, it turns into clear to us that the administration doesn’t care in regards to the privateness of their very own sufferers.”

The hackers mentioned they plan to launch extra knowledge and the hospital’s inner emails within the subsequent few days.

“These organizations who’re amassing and storing non-public knowledge needs to be in control of its privateness,” hackers declare.

The Ragnar Locker group just isn’t related to any explicit nation. It has focused numerous entities previously, together with Portugal’s nationwide airline, the Japanese gaming firm Capcom, pc chip producer Adata, and aviation big Dassault Falcon.

The FBI reported that from April 2020 to March 2022, the Ragnar Locker ransomware was used to assault the networks of not less than 52 organizations throughout numerous important infrastructure sectors within the U.S.

The hackers’ assault on Mayanei Hayeshua Medical Heart raised issues amongst safety researchers.

“Completely appalled by the most recent RagnarLocker assault and knowledge leakage on Mayanei Hayeshua Medical Heart in Israel. Attacking healthcare services isn’t just immoral, it is devastating on so many ranges,” said Ohad Zaidenberg, founding father of CTI League, a worldwide group of cybersecurity volunteers who defend hospitals from cyberattacks.

“Leaking this knowledge can break households and push susceptible people over the sting,” Zaidenberg added.

Get extra insights with the

Recorded Future

Intelligence Cloud.

Study extra.

Daryna Antoniuk

Daryna Antoniuk
is a contract reporter for Recorded Future Information primarily based in Ukraine. She writes about cybersecurity startups, cyberattacks in Japanese Europe and the state of the cyberwar between Ukraine and Russia. She beforehand was a tech reporter for Forbes Ukraine. Her work has additionally been printed at Sifted, The Kyiv Impartial and The Kyiv Publish.