RansomHub gang claims breach of Florida Department of Health, FDH confirms
Learn More
RansomHub ransomware group claims that they have executed cyberattack and data theft from the Florida Department of Health (DOH).
The group claims to have obtained 100 gigabytes of potentially sensitive data on Floridians and has threatened to release it unless an undisclosed ransom is paid by Friday, 5th of July 2024. The DOH's Press Secretary, Jae Williams, confirmed the incident, which has disrupted the state’s online Vital Statistics system, used for issuing birth and death certificates.
Due to the attack, the state tax collectors’ offices and funeral homes were unable to issue birth and death certificates since the attack began, and pasco County health offices regained some functionality by Wednesday.
Potentially Exposed Data:
- COVID-19 vaccine records
- Prescriptions for controlled substances
- Medical marijuana patient data
No details are disclosed about the number of affected individuals.
The DOH is coordinating with law enforcement. A comprehensive assessment is underway, and affected parties will be notified.
Update - As of 9th of July 2024, RansomHub leaked 100 gigabytes of files stolen from the Florida Department of Health after the department declined to pay a ransom. The published data includes:
- logs of chest X-ray scheduling
- names,
- dates of birth,
- appointment details
- compensation records
- treatment history
- personal demographics
- mammography screening results
- family planning forms
- dental service referrals
- personal correspondence
As of 21st August. the Florida Department of Health announced that it is offering credit monitoring and identity protection services to individuals potentially affected by the cyberattack. Affected individuals are being notified via personalized letters containing details specific to the compromised data.
The exposed information includes a wide range of personal details, such as:
- Names
- Dates of birth
- Addresses
- Social Security Numbers
- Banking and credit card information
- Driver’s license numbers
- Passport numbers
- Military identification numbers
- Nexus numbers
- Medical and dental history
- Medication and prescription information
- Provider, doctor, or care coordinator names
- Insurance claim and coverage information
- Passwords
The Florida Department of Health stated that it is actively cooperating with law enforcement and cybersecurity experts to investigate the breach and reduce its impact.
