London Bridge Plastic Surgery

The well-known London Bridge Plastic Surgery centre acknowledged receiving a cyberattack in a statement.

With an LBPS email address, the Dark Overlord reached out to Cox to demonstrate their hacking of the clinic's systems.

The cache contains extremely detailed and close-up photos of surgery performed on both male and female genitalia. Other photos appear to depict the patients' bodies after the procedure, and occasionally they even feature faces.

The hacker group also asserts that the compromised data threatens to release the patient list and their images and contains information on royal families.

Source: https://securityaffairs.com/64782/data-breach/london-bridge-plastic-surgery-hack.html

TPRM report: https://scoringcyber.rankiteo.com/company/london-bridge-plastic-surgery-limited

"id": "lon2349171223",
"linkid": "london-bridge-plastic-surgery-limited",
"type": "Breach",
"date": "11/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Plastic Surgery',
                        'location': 'London',
                        'name': 'London Bridge Plastic Surgery',
                        'type': 'Healthcare'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'data_exfiltration': True,
                 'file_types_exposed': ['Images'],
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Surgical photos',
                                              'Patient information',
                                              'Royal family information']},
 'description': 'The London Bridge Plastic Surgery centre acknowledged '
                'receiving a cyberattack where the Dark Overlord hacker group '
                'compromised sensitive patient data including detailed '
                'surgical photos and information on royal families.',
 'impact': {'data_compromised': ['Sensitive patient data',
                                 'Surgical photos',
                                 'Information on royal families']},
 'initial_access_broker': {'entry_point': 'Email',
                           'high_value_targets': 'Royal families'},
 'motivation': 'Data Exfiltration and Ransom',
 'ransomware': {'data_exfiltration': True},
 'threat_actor': 'Dark Overlord',
 'title': 'London Bridge Plastic Surgery Cyberattack',
 'type': 'Data Breach'}