We already knew that the hackers responsible for the cyberattack in August against the South Francilien Hospital Center (CHSF) in Corbeil-Essonnes had carried out their threats: if the hospital did not pay the ransom demanded in due time (from first 10 million dollars, today five to ten times less) they were going to publish a series of hijacked data, so they did.
But the data published by the hackers is much more confidential than what the management of the establishment first announced in a first press release.
According to the hospital, the patient data that was disseminated concerned
"their Social Security number, their health data such as examination reports and in particular radiology information,
.
According to a survey by France Info, whose journalists claim to have been able to consult
part of the information disclosed on the "
dark net
", this is all nominative (therefore associated with the surname, first name and date of birth of each patient, informed about the labels that accompany patients during their hospitalization, and there are "nominative reports of colonoscopy, childbirth, gynecological examinations" but also "
a request for an autopsy on a young patient who died in hospital
".
Read alsoIn the Corbeil-Essonnes hospital, targeted by a cyberattack, deserted corridors and worried families
It seems that the choice of data owes nothing to chance: evidenced, in particular, by the large amount of information relating to examinations of women with breast cancer.
For each of the patients concerned, the results of examinations but also the treatment followed are therefore accessible online, in these documents that some ten thousand Internet users have already been able to consult.
This at the start of the month devoted to breast cancer, through the “Pink October” operation.
The disclosure of this information, in addition to serving to increase pressure on the Corbeil-Essonnes hospital in the hope that the institution will pay the ransom demanded from the Russian-speaking hackers, who call themselves "
Lockbit 3.0
", puts in at the same time endangers the persons concerned who can now be victims of multiple scams, for example attempts at bank fraud through false e-mails imitating health insurance.
