Bigpharmacy.com.my listed on RansomHub leak site

• Ransomware group: RansomHub
• Country: Malaysia
• Sector: Healthcare
• Announcement date: October 17, 2024

RansomHub claims breach of Bigpharmacy.com.my

The RansomHub ransomware group has listed the Malaysian-based pharmacy chain Bigpharmacy.com.my on its dedicated leak site. According to the announcement made on October 17, 2024, the threat actor group claims to have successfully gained unauthorized access to the organization's internal systems. This listing follows a pattern of double extortion tactics often employed by modern ransomware groups, where stolen data is used as leverage to pressure victims into paying ransoms.

The group alleges that they have obtained sensitive information during their intrusion. To support their claims, the attackers have provided samples of documents that they assert could significantly impact the ongoing operations of the organization. This type of public disclosure is a hallmark of Ransom-as-a-Service (RaaS) operations, designed to maximize the visibility of the breach and increase the pressure on the target entity.

Details of the alleged data theft

The information released by the RansomHub group includes various types of highly sensitive documentation. Based on the screenshots provided by the attackers, the data allegedly includes a wide range of clinical and personal information. This includes clinical laboratory reports, patient names, and national ID numbers. Furthermore, the leaked content reportedly contains details regarding age, gender, and diagnostic information.

In addition to medical specifics, the group claims to have accessed several other categories of sensitive information, such as:

• Patient health records
• Personally Identifiable Information (PII)
• Prescription information
• Payment records

The presence of such diverse data types, ranging from medical diagnoses to financial receipts and contact information, suggests a deep level of access into the organization's databases and administrative files.

About Big Pharmacy

Big Pharmacy is a prominent pharmacy chain and online retailer operating within Malaysia. The organization maintains a broad presence in the healthcare market, offering a wide variety of essential healthcare products. Their inventory includes medications, nutritional supplements, personal care items, and various types of medical equipment, serving both physical and digital retail channels.

Risk assessment and industry implications

The alleged leak of this data poses a high level of risk to the organization and the individuals involved. Because the data includes patients' medical histories alongside personal identification details, there is a significant potential for identity theft and highly targeted phishing attacks against the affected individuals. Such attacks often leverage the specific details found in medical records to gain the trust of the victim.

From a regulatory and business perspective, the organization may face significant challenges. This includes potential legal sanctions under Malaysian data protection regulations and substantial reputational damage. Furthermore, the disclosure of this data may create indirect risks for the organization's various supply chain partners who interact with the pharmacy's systems.

RansomHub, the group responsible for this claim, is reported to be a RaaS structure that emerged in early 2024 and has been noted to operate following the activities of the ALPHV group. In the healthcare sector, where data sensitivity is paramount, such incidents highlight the critical need for robust defensive measures. Organizations in this sector typically focus on implementing multi-factor authentication, maintaining rigorous patch management, and conducting regular security audits to mitigate the risk of unauthorized access to sensitive patient information.