A court filing from Allentown, Pa.-based Lehigh Valley Health Network says Russian ransomware gang BlackCat posted 2,800 pictures of breast cancer patients undressed from the waist up, WFMZ reported April 12.
Lehigh Valley Health Network also said BlackCat demanded $5 million ransom after it breached its IT network on Feb. 6.
This comes after Lehigh Valley Health Network told Becker's that BlackCat had posted limited patient information on the dark web, including three screenshots, which were "clinically appropriate photographs of cancer patients receiving radiation oncology treatment at LVPG Delta Medix, as well as seven documents containing patient information."
Lehigh Valley Health Network is currently facing a lawsuit which accuses it of making a "knowing, reckless and willful decision to let the hackers post the nude images," while "publicly patting itself on the back for standing up to the hackers" and "consciously and intentionally ignoring the real victims."
The health system is trying to transfer this suit from a Lackawanna County, Pa., court to the U.S. District Court and said it could cost more than $55 million to resolve it.