Hackers declare to have printed a trove of delicate knowledge belonging to IVF sufferers after a cyberattack on Genea, considered one of Australia’s largest fertility suppliers.
Genea stated final week that it had skilled a cybersecurity incident that led to delicate affected person data probably being compromised. In a press release given to TechCrunch on Wednesday, Genea CEO Tim Yeoh stated the corporate had since recognized that “knowledge taken from our methods has been printed externally.”
This assertion got here after the Termite ransomware gang, which not too long ago took credit score for an assault on provide chain software program big Blue Yonder, listed Genea on its darkish net leak web site, the place it claimed to have printed delicate affected person knowledge.
Samples of the allegedly stolen knowledge, seen by TechCrunch, seem to point out government-issued identification paperwork and delicate medical information.
In an up to date assertion, Genea stated it was granted a courtroom injunction on Wednesday to “forestall any entry, use, dissemination or publication of the impacted knowledge by the risk actor and/or any third occasion who receives the stolen dataset.”
The courtroom order, seen by TechCrunch, reveals that the hackers breached Genea’s Citrix setting on January 31 earlier than extracting roughly 940 GB of knowledge on February 14.
Genea stated it presently doesn’t know what knowledge was accessed, and Yeoh advised TechCrunch that the corporate is “urgently investigating the character and extent of the info that has been printed.”
Nevertheless, Genea did be aware that hackers had compromised its affected person administration system, which accommodates data akin to sufferers’ contact particulars, Medicare card numbers, medical insurance particulars, medical histories, take a look at outcomes, and medicines.
Genea stated there was presently no proof that sufferers’ monetary data, akin to bank card particulars or checking account numbers, had been compromised.
It’s not identified what number of people could have been impacted by the breach, however Genea stated it’s speaking with each present and former sufferers.
In its up to date assertion, Genea stated it’s working to “securely restore” its methods following the cyberattack, nevertheless it didn’t say whether or not the incident continues to disrupt affected person providers. ABC Information reported final week that the corporate’s MyGenea app, which allows sufferers to trace their cycle and look at fertility knowledge, was taken offline because of the incident.