Moorfields NHS UK & Dubai was targeted by the threat actors calling themselves AvosLocker in September 2021.
The threat actors exfiltrated and dumped the files concerned with business functions and personnel — resumes, credentials, and related personnel files when they refused to pay.
The dumped data included patients’ names, time of appointment, ID number, diagnosis, tests run, and insurance information along with a separate file containing more than 1,100 photocopies of patients’ passports.
"id": "MOO22427123",
"linkid": "moorfields-eye-hospital-dubai",
"type": "Data Leak",
"date": "09/2021",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"