The results of medical tests of thousands of Poles were leaked online. Hackers threaten to have more

As the website dealing with cybersecurity writes, confidential medical data was published by the widely unknown RA World group, which specializes in ransomware attacks (e.g. stealing data and demanding a ransom for not publishing it). The hackers were to attack the ALAB network of medical laboratories.

Research results of 50,000 Poles online. This is the result of a hacker attack

that so far cybercriminals have published links on the Internet allowing for downloading two data archives with a total capacity of approximately 6 GB. The first package contains three catalogs and a total of 110,000. files in two formats (PDF and XML). Each of these files is the result of a medical examination conducted by one of the ALAB laboratories. Each study is saved in both PDF and XML files.

This means that the results of 55,000 were made available online. various medical examinations of Poles. As the website writes, the results most often concern different patients, so it can be assumed that at least 50,000 people were affected by the hacker attack. people. Based on the markings of the stolen files, it can be estimated that the criminals obtained the results of research conducted from 2017 to 2023 (the last study is dated September 27 this year). The hackers probably published the medical data of all people who used the laboratory network at that time.

This is important not only because each file contains confidential medical data. They contain a number of data allowing the identification of a specific patient – PESEL number, residential address and name and surname. As if that was not enough, there is also information about the time of ordering and performing each test. The Trusted Third Party writes that the catalog includes virtually all laboratory tests that can be performed.

Hackers threaten to have more stolen data. They announced the date

Hackers from RA World claim that the recently published archives are just a sample of the data they managed to steal from ALAB. The burglars wrote that the publication of sensitive data was the result of the company’s “lack of willingness to cooperate.” The network of laboratories most likely refused to pay the ransom. At the same time, the hackers assure that they have a much more extensive set of confidential information that they managed to steal – a total of as much as 246 GB of data.

Criminals threaten to publish all stolen information by December 31 this year. A Trusted Third Party verified that RA World did in fact publish data from other, previous hacks if their victims did not comply with the demands. According to the counter of the website where the current sample of data was published, sensitive data has been downloaded approximately 30 times so far.

The Trusted Third Party also writes that the ALAB website disappeared on Sunday morning, but it is not clear whether it is related to the activities of hackers (currently the website is functioning normally). For now, there are no signs that the data from this leak could be used for malicious purposes. The ALAB laboratory network has not commented on this incident so far.