On the night of Tuesday last week, Sophiahemmet was subjected to a hacker attack. The hospital shut down all computers as soon as they learned of the incident and switched to paper procedures.
On Friday, Sophiahemmet confirmed to Läkartidningen that it was an extortion attack (ransomware), but that no demands or threats had been made against the hospital. In that situation, there would also have been no indication that patient data had been leaked.
But now it is confirmed that the hackers came across the patient data and also put it up for sale on the darknet, which can be said to be the part of the internet that is anonymous and deliberately difficult to trace.
It’s about a hacking group called Medusa that posted over 60,000 files, IT security expert Jonas Axelson tells Sveriges Radio P4 Varmland.
– It is information about employees, holiday plans, price lists, and unfortunately also information about patients – social security numbers, names and so on, he says to the radio channel.
He has noted a page where the information is for sale, but that it is unclear whether the information was sold on.
Today’s News states that there is a requirement linked to the advertised sale. Medusa is asking for a million dollars, where they give the hospital a chance to pay without the information being disseminated, otherwise anyone can buy the data. In addition, a third option is given: delaying the general sale by one day for $10,000.
Sophiahemmet tells TT Nyhetsbyrån that they do not know the extent or exactly what information was stolen. However, the hospital confirms that it received a message from Medusa with a screenshot announcing that it had taken the data.
Read also:
Extortion attack without demands that was directed at Sophiahemmet
The major hacker attack against Sophiahemmet is reported to the police
Lakartidningen.se 2024-03-04
