Hospital Centro de Andalucia in Lucena, Spain was targeted by the Vice Society threat actors in mid December.
The threat actors dumped the data stolen from the hospital including internal documents such as invoices, budgets, templates, and commercial contracts to their leak site.
Some of the compromised files also included personal files related to employees and the patients.
The hospital did not pay any ransom and restored its systems from backups.
TPRM report: https://www.rankiteo.com/company/hospitalcentro-andalucia
"id": "hos203321422",
"linkid": "hospitalcentro-andalucia",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Healthcare',
'location': 'Lucena, Spain',
'name': 'Hospital Centro de Andalucia',
'type': 'Hospital'}],
'attack_vector': 'Data Exfiltration',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': True,
'type_of_data_compromised': ['invoices',
'budgets',
'templates',
'commercial contracts',
'personal files related to '
'employees and patients']},
'date_detected': 'mid December',
'description': 'Hospital Centro de Andalucia in Lucena, Spain was targeted by '
'the Vice Society threat actors in mid December. The threat '
'actors dumped the data stolen from the hospital including '
'internal documents such as invoices, budgets, templates, and '
'commercial contracts to their leak site. Some of the '
'compromised files also included personal files related to '
'employees and the patients. The hospital did not pay any '
'ransom and restored its systems from backups.',
'impact': {'data_compromised': ['invoices',
'budgets',
'templates',
'commercial contracts',
'personal files related to employees and '
'patients']},
'motivation': 'Data Theft',
'ransomware': {'data_exfiltration': True},
'response': {'remediation_measures': 'Restored systems from backups'},
'threat_actor': 'Vice Society',
'title': 'Data Breach at Hospital Centro de Andalucia',
'type': 'Data Breach'}