Home / Crime and Justice / Hacker Claims 100,000 Docs Stolen from NSW Health
Hacker Claims 100,000 Docs Stolen from NSW Health
4 Nov
Summary
- A hacker claims to have accessed around 100,000 sensitive documents.
- Cybercrime detectives are investigating the alleged data breach.
- NSW Health stated no patient data was impacted by the breach.
NSW Health is under investigation following claims of a significant data breach. A hacker, identifying as 'bytetobreach', alleges they accessed around 100,000 sensitive documents from the health system. The threat actor claims to have exploited a misconfigured subdomain, exfiltrating approximately 70GB of data that reportedly dates back to 2020.
Cybercrime detectives were notified of the alleged incident on Friday afternoon. A spokesperson for Cyber Security NSW has stated that the breach impacted an 'isolated server' and emphasized that no patient data was affected nor is it currently at risk. The hacker also stated they have alerted the Computer Emergency Response Team and are not demanding a ransom.
The claim, which originated from a dark web forum post, is currently pending verification by threat intelligence platforms. This alleged incident serves as a stark reminder of ongoing cybersecurity challenges faced by public sector organizations.
