BianLian Ransomware Gang Claims Heist of Pediatric Data

October 18, 2024 – Published on HealthcareInfoSecurity

Ransomware gang BianLian has listed Boston Children’s Health Physicians – a pediatric group that practices in New York and Connecticut – on its dark web site, threatening to release stolen patient and employee data. The practice said the September incident involved an IT vendor.

BCHP’s investigation into the incident determined that an “unauthorized third party” gained access to the practice’s network on Sept. 10, taking certain files from its network.

Ransomware group BianLian as of Friday had Boston Children’s Health Physicians listed on its dark web site, claiming to have the practice’s data, including finance data, HR data, mailboxes and internal and external email correspondences, database exports, protected health information and personally identifiable records, health insurance records and minors’ data.

BianLian was among the top three ransomware groups targeting the healthcare industry by victim volume during the first nine months of 2024, said Grayson North, senior security consultant at GuidePoint Security, which Thursday released a threat intelligence report on ransomware trends in the third-quarter of 2024.

LockBit and RansomHub were the other top three hitting healthcare so far this year, he said.

Read More HERE.