BlackCat ransomware gang posted screenshots of patient diagnoses and pictures of breast cancer patients undressed from the waist up from Allentown, Pa.-based Lehigh Valley Health Network, BankInfoSecurity reported March 6.
The group posted the photos to its dark leak site with a message to Lehigh Valley stating "we have been in your network a long time and have had time to study your business." "We have stolen your confidential information and are ready to publish it."
On Feb. 22, Lehigh Valley Health Network President and CEO Brian Nester said the health network was targeted by BlackCat on Feb. 6.
The group was able to get into Lehigh Valley's computer system that is used for patient images for radiation oncology treatment.
According to Mr. Nester, BlackCat demanded a ransom payment, but Lehigh Valley refused to pay it and said it was working with cybersecurity experts to evaluate the situation further.
Lehigh Valley Health Network told Becker's that BlackCat has posted limited patient information on the dark web, including three screenshots, which are "clinically appropriate photographs of cancer patients receiving radiation oncology treatment at LVPG Delta Medix, as well as seven documents containing patient information."
Lehigh also it is continuing to investigate the incident and is in the process of identifying information involved in the incident.
"Based on our analysis to date, the attack was focused on the Delta Medix IT system and has had very limited impact on other LVHN IT systems," a spokesperson for Lehigh told Becker's. "We will provide notices as required to those whose information was involved."