GossiTheDog, 2 months ago

NHS Dumfries and Galloway finally confirm ransomware, say:

“We absolutely deplore the release of confidential patient data as part of this criminal act.

“This information has been released by hackers to evidence that this is in their possession.

“We are continuing to work with Police Scotland, the National Cyber Security Centre, the Scottish Government, and other agencies in response to this developing situation.”

#threatintel

GossiTheDog, 2 months ago

INC Ransomware group should go on the shit list if they don’t delete the data and help decryption, it’s a shit target - it’s public healthcare. #threatintel

GossiTheDog, 2 months ago

The Scottish government have confirmed the INC Ransomware “NHS Scotland” dump is actually just NHS Dumfries and Galloway.

https://www.bleepingcomputer.com/news/security/inc-ransom-threatens-to-leak-3tb-of-nhs-scotland-stolen-data/

#threatintel #ransomware

GossiTheDog, 2 months ago

NHS Dumfries and Galloway have set up a website for victim questions: https://www.nhsdg.co.uk/cyber-attack-faq/

NHS D&G are saying a small number of patient info has been leaked but there is a lot of wordsmithing going on - they’re talking about just the INC portal posts, and they’re only contacting those patients.

I am hoping the Scottish government tells them not to pay the extortion.

#threatintel #ransomware

GossiTheDog, 1 month ago

INC Ransomware have dumped patient data from the NHS Dumfries and Galloway incident https://www.bbc.com/news/articles/cglvpnpxx87o #threatintel #ransomware

For what it’s worth, I think it’s good the Scottish government didn’t pay - they should use their powers to suppress data proliferation.