Moorfields Eye Hospital Dubai

Moorfields NHS UK & Dubai was targeted by the threat actors calling themselves AvosLocker in September 2021.

The threat actors exfiltrated and dumped the files concerned with business functions and personnel resumes, credentials, and related personnel files when they refused to pay.

The dumped data included patients’ names, time of appointment, ID number, diagnosis, tests run, and insurance information along with a separate file containing more than 1,100 photocopies of patients’ passports.

Source: https://www.databreaches.net/uae-moorfields-eye-hospital-in-dubai-sees-more-staff-and-patient-data-dumped/

TPRM report: https://www.rankiteo.com/company/moorfields-eye-hospital-dubai

"id": "moo22427123",
"linkid": "moorfields-eye-hospital-dubai",
"type": "Data Leak",
"date": "9/2021",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': ['UK', 'Dubai'],
                        'name': 'Moorfields NHS UK & Dubai',
                        'type': 'Healthcare'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Medical Information',
                                              'Insurance Information',
                                              'Passport Information']},
 'date_detected': 'September 2021',
 'description': 'Moorfields NHS UK & Dubai was targeted by AvosLocker '
                'ransomware in September 2021. The threat actors exfiltrated '
                'and dumped files related to business functions and personnel, '
                'including resumes, credentials, and related personnel files. '
                'The dumped data included patients’ names, time of '
                'appointment, ID number, diagnosis, tests run, and insurance '
                'information along with a separate file containing more than '
                '1,100 photocopies of patients’ passports.',
 'impact': {'data_compromised': ['resumes',
                                 'credentials',
                                 'personnel files',
                                 'patients’ names',
                                 'time of appointment',
                                 'ID number',
                                 'diagnosis',
                                 'tests run',
                                 'insurance information',
                                 'photocopies of patients’ passports']},
 'motivation': 'Financial',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'AvosLocker'},
 'threat_actor': 'AvosLocker',
 'title': 'AvosLocker Ransomware Attack on Moorfields NHS UK & Dubai',
 'type': 'Ransomware'}