Betances Health Center listed on Hunters ransomware leak site

• Ransomware group: Hunters
• Country: United States
• Sector: Healthcare
• Announcement date: July 24, 2024

Hunters claims data breach at Betances Health Center

The ransomware group known as Hunters has claimed responsibility for a cyberattack targeting the Betances Health Center. According to an announcement posted on the group's leak site, the organization's systems have been compromised, involving both the encryption of data and its unauthorized exfiltration from the network.

Ransomware attacks typically involve a malicious actor gaining access to a network to deploy encryption software, which renders files inaccessible to the legitimate owner. In recent years, many groups have shifted toward a double-extortion model. In this strategy, attackers do not merely lock the victim's files but also steal sensitive information beforehand. This allows the threat actors to threaten the public release of the stolen data if the ransom is not paid, creating additional pressure on the victim organization.

Details of the alleged attack

The announcement made by the Hunters group on July 24, 2024, alleges that the organization's data has been both encrypted and exfiltrated from their systems. The group's listing indicates that the breach may have resulted in the compromise of a significant volume of information. Specifically, the group claims that 124.7 GB of data has been affected, which consists of a total of 361,564 files.

While the group has provided specific metrics regarding the volume and file count of the alleged theft, the listing does not provide any specific details regarding the nature of the data contained within those files. The provided screenshots confirm the claims of exfiltration and encryption, yet the specific content or categories of the compromised information remain unstated by the attackers.

About Betances Health Center

Betances Health Center is a community-based health center that serves the Lower East Side of New York. The organization is dedicated to providing essential services to low-income and vulnerable populations. Its service offerings include primary healthcare, dental services, and various social support services designed to assist the local community.

Potential implications and sector risks

The claims made by the Hunters group could pose a significant risk to patient data privacy, given the organization's operations within the healthcare sector. Because the Betances Health Center is a US-based entity, a potential data breach of this nature may trigger legal proceedings under HIPAA regulations, which govern the protection and privacy of sensitive patient health information.

The exfiltrated data, if the claims are accurate, could potentially be utilized by malicious actors for identity theft or for conducting targeted phishing attacks against individuals. Such attacks often leverage stolen personal information to gain further access to systems or to defraud victims through social engineering.

It is worth noting that the Hunters group is assessed to be derived from Hive code, suggesting they may follow a double-extortion strategy consistent with past methods used by that group. Information regarding the specific capabilities and infrastructure of the Hunters group remains limited.

For organizations operating in the healthcare sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for organizations include maintaining rigorous patch management, implementing multi-factor authentication, and ensuring comprehensive data encryption for both resting and in-transit data. Furthermore, regular offline backups and continuous monitoring of network traffic can help detect and mitigate the impact of unauthorized exfiltration and encryption attempts.