New data from RansomHouse's Clínic hospital cyberattack published

RansomHouse cybercriminals published new data from the attack against the Clínic hospital detected in early March. The health center is currently studying what sort of information was released after the first batch of personal data was shared on March 30.

The hospital has been working with the Cybersecurity Agency of Catalonia since the attack and remembers that fully or partially publishing data is a crime.

The attack on one of Barcelona's top public medical centers affected the lab, the pharmacy, and the emergency departments. In early March, the website had to be taken down, and many nurses and doctors had to use pen and paper for their day-to-day.

RansomHouse, who acknowledged the attack, has published sensitive data since March 30, after the hospital and authorities denied paying a $4.5 million ransom. In total, hackers stole 4.4 terabytes of data.

While in early April, Catalan Mossos d'Esquadra police took down RansomHouse's website to prevent more data from being published, the cybercriminal group behind the Hospital Clínic cyberattack threatened to reveal personal information of patients with infectious diseases, as well as data relating to the use of experimental drugs on the elderly.

The threat became real two weeks after when hackers devised a new system to release the latest batch of hacked data, allowing users to download the information via a torrent filesharing link. 

On June 22, the Catalan data protection authority (APDCAT) announced an investigation into Hospital Clínic's data protection tools, as it could be a sanctioning motive after data was hacked and published.

Podcast

Listen to the podcast below for more on cyberattacks in Catalonia, including how ransomware attacks work and why public institutions are increasingly being targeted.