Breaches and incidents

CR Healthcare Services (Hyderabad, India): ransomware encrypts patient platform data, Rs 8.5 crore demanded

Telangana Today reports the health-tech firm’s systems and patient records on its platform were encrypted around 29 Sep.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Telangana Today reports the health-tech firm’s systems and patient records on its platform were encrypted around 29 Sep; data reportedly included names, photos, phone numbers, dates of birth, addresses, diagnostic reports, FHIR clinical records and audit reports. Attackers sent sample records, demanded about Rs 8.5 crore in crypto and separately USD 100,000 within 72 hours.
  • Root cause: not disclosed.
  • Attacker: unidentified.
  • Response: complaint to Cyberabad Cybercrime police, investigation opened. No CERT-In statement found.