Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Ransomware Gang Leaks Data Allegedly Stolen from Florida Department of Health

The Ransomhub ransomware gang has claimed the theft of 100GB of data from the Florida Department of Health.

Malware

The ransomware group known as RansomHub is leaking data allegedly stolen from the Florida Department of Health.

The cybercriminal group added the agency to its Tor-based leak site on July 2, claiming to have stolen over 100 gigabytes of data from its network, including personally identifiable information (PII) and protected health information (PHI).

RansomHub began publishing the allegedly stolen information over the weekend, after the Florida DOH missed a Friday deadline the gang set for receiving a ransomware payment in exchange for not releasing the data.

Under Florida law, government entities are prohibited from making ransom payments, so the missed deadline should not come as a surprise.

The leaked data reportedly includes service-related files, employee records, passport scans, prescriptions, health programs applications, screening results, family planning forms, dental services data, various correspondence, and more.

Potentially compromised PII and PHI includes names, addresses, phone numbers, dates of birth, Social Security numbers, appointment details, health insurance information, medical record numbers, screening results, health policy numbers, and more.

Advertisement. Scroll to continue reading.

The Florida Department of Health last week confirmed it was dealing with a cybersecurity incident, without providing further information on the attack.

The incident disrupted multiple services within the department, including the online system used for birth and death certificates issuance.

SecurityWeek has contacted the Florida DOH for additional information on the incident and will update this article if additional information is received.

Responsible for the recent attacks on Frontier Communications and Christie’s, RansomHub was the third most active ransomware group in May, accounting for 22 incidents.

Related: 300k Affected by Year-Old Data Breach at Florida Community Health Centers

Related: Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

Related:Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

SolarWinds has appointed Justin Henkel as Chief Information Security Officer.

J. Paul Haynes has joined Cinchy as Chief Executive Officer.

Hatem Naguib has become Chief Executive Officer at Sysdig.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.