WestcoastSmile Dental Studio listed on Medusa ransomware leak site

• Ransomware group: Medusa
• Country: Jordan
• Sector: Retail & E-Commerce
• Announcement date: April 23, 2023

Medusa ransomware group claims data breach at WestcoastSmile Dental Studio

The Medusa ransomware group has officially listed WestcoastSmile Dental Studio on its dedicated leak site. According to the group's announcement, they claim to have successfully compromised the institution's data. This development marks a significant escalation in the pressure applied to the organization, as the group has moved from initial infiltration to publicizing the breach on their platform.

The group is employing a double extortion tactic, a common method used by modern ransomware operators. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release stolen data publicly, the attackers aim to maximize the pressure on the victim to comply with their demands. In this specific case, the Medusa group is demanding a ransom of $100,000 in exchange for the non-disclosure or deletion of the stolen information.

Details of the claimed attack and ransom demand

The announcement made by the Medusa group on April 23, 2023, claims that the attack occurred on the same day. While the group has posted the organization's name on their leak site, they have not provided specific details regarding the total size of the data stolen or the exact number of files involved. However, to demonstrate the validity of their claim, the group has shared samples of various files and documents that may contain sensitive patient information.

The information shared by the attackers includes screenshots that allegedly display various types of sensitive data. Based on the samples provided by the group, the following data types are reportedly involved in the breach:

• Patient names
• Patient contact information
• Email addresses
• Medical imaging data

The presence of such specific documentation, including directories and medical images, highlights the sensitive nature of the information the group claims to possess.

About WestcoastSmile Dental Studio

WestcoastSmile Dental Studio is a dental clinic located in Vancouver, Canada. The clinic has been operating for over 20 years and provides general dental services. It is led by Dr. Jeffrey Jordan.

Implications and potential risks for the organization

The double extortion method utilized by the Medusa group poses significant risks to the institution, potentially jeopardizing both its operational continuity and patient privacy. Because the organization operates within Canada, it may face substantial legal liabilities under data protection regulations, such as the Personal Information Protection and Electronic Documents Act (PIPEDA).

There is a high probability that the leaked data could be exploited by malicious actors for various purposes, including identity theft or highly targeted phishing attacks. When sensitive details like contact information and medical imaging are exposed, the risk to the individuals involved increases significantly. Given that the Medusa group has been active since 2021 and utilizes leak sites to exert pressure, the institution may need to initiate formal data breach notification procedures to comply with regulatory requirements and inform affected parties.

In general, organizations in the healthcare and dental sectors can take several defensive steps to mitigate such risks. These include implementing robust encryption for data at rest and in transit, maintaining strict access controls, and conducting regular security audits. Furthermore, establishing a clear incident response plan and ensuring comprehensive data backup strategies are essential for maintaining operational resilience during a cyberattack.