Medequip Assistive Technology listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: United Kingdom
• Sector: Healthcare
• Announcement date: April 16, 2024

The Akira ransomware group has listed Medequip Assistive Technology on its leak site, claiming to have compromised a significant amount of data belonging to the organization. According to the announcement made on April 16, 2024, the group alleges that they have successfully breached the company's systems, resulting in a data breach involving approximately 50 GB of information.

The alleged attack and claims by Akira

The Akira ransomware group has published a leak announcement claiming to have compromised data belonging to Medequip Assistive Technology. The group alleges that 50 GB of data related to the organization's services for local authorities and the NHS will be made available soon. This announcement suggests that the data contains sensitive information regarding the organization's internal operations.

Ransomware groups often utilize leak sites to host announcements regarding their targets. In many cases, these groups employ a method known as double extortion. This tactic involves not only encrypting an organization's data to disrupt operations but also stealing sensitive information to use as leverage. By threatening to publish the stolen data on a public leak site, the attackers aim to exert maximum pressure on the victim organization to pay a ransom to prevent the disclosure of confidential information.

The scope of the claimed data breach

While the group has not provided any screenshots to verify their claims, the leak announcement specifies that the stolen data includes a variety of sensitive and confidential materials. The information allegedly taken is said to include personal identifiers, legal documents, and internal business records.

The data types claimed to be involved in this breach include:

• National Insurance Numbers (NINOs)
• Birth certificates
• Driver licenses
• Confidential reports
• Agreements
• Internal business information

The presence of such highly sensitive personal documentation, such as birth certificates and driver licenses, highlights the potential severity of the breach for the individuals whose information is contained within the files.

About Medequip Assistive Technology

Medequip Assistive Technology is a leading provider of home care equipment and support services to local authorities and the NHS across the UK. The company offers a wide range of assistive technologies and equipment designed to facilitate independent living for individuals in their own homes.

Potential impacts and sectoral implications

This alleged breach may pose secondary risks such as identity theft and fraud for the organization's employees and the individuals it serves. Given that the organization operates in the healthcare sector, the alleged data may fall under the scope of UK GDPR regulations. The Akira group's double extortion method may be intended to exert pressure on the organization through the threat of data publication.

Considering the organization's relationships with supply chain partners and the NHS, the incident could potentially have negative impacts on sectoral trust. In the healthcare industry, where trust and data integrity are paramount, breaches involving sensitive personal information can have wide-reaching consequences for the reputation of service providers and the confidence of the public and government partners.

While public information about the Akira group remains limited, it is known that VPN vulnerabilities are frequently exploited in similar attacks. To defend against such threats, organizations often implement various security measures, such as enforcing multi-factor authentication, maintaining rigorous patch management schedules, and monitoring network traffic for unusual activity. Securing remote access points and ensuring robust encryption for sensitive data are also common defensive strategies used to mitigate the risk of unauthorized access and data exfiltration.