Cybercriminals release more Hospital Clínic data on patients and staff

RansomHouse, the cybercriminals who hacked Barcelona's Hospital Clínic, have confirmed that they have published more confidential data. 

As reported in a Telegram group and shared on Twitter, RansomHouse have devised a new system to release the latest batch of hacked data, allowing users to download the information via a torrent filesharing link. 

The latest release contains more than 5 gigabytes of data, according to Catalan online newspaper Vilaweb. 

RansomHouse have also provided details on how to download the files anonymously and safely, so as not to leave a trace. 

This new leak comes almost two weeks after Catalan police, the Mossos d'Esquadra, took down the RansomHouse website on April 4. It has since been restored. 

Staff and patient data 

A total of 5.56 GB of data has been released Vilaweb says, making it the largest leak to date. 

It contains information about hospital staff and on patient referrals between hospitals, including personal information such as full name, address, phone number, diagnosis and treatment. 

Most of the patients affected were referred to the hospital's infectious diseases unit. 

Cyberattack 

Hospital Clínic suffered a cyberattack by RansomHouse on March 5. 

The group demanded a $4.5m ransom from the hospital to return the data, totaling 4.4 terabytes. 

On March 30, the hackers published some of the stolen data on the dark web, making it available for free. 

Podcast 

Listen to the podcast below for more on cyberattacks in Catalonia, including how ransomware attacks work and why public institutions are increasingly being targeted.