IT Professionals, Guilty

[Thomas_Brady]

Mick Martin just sent them a text there… You can forget about your take away millions.

[balbec]

Very professional in fairness

[Heyyoubehindthebushes]

Yerrah I’m pretty sure proof that I’ve no foreskin is already on the Internet somehow

[Fagan_ODowd]

@Copper_pipe

@Copper_pipe

Had a look on one of the leak forums for any mention of the HSE but no trace.

I wasn’t looking in the right places…

From the Financial Times.

Irish patients’ stolen data appears online

Hackers further demands for $20m ransom by posting health service files and correspondence.

Medical and personal information about Irish patients stolen by hackers last week is now being shared online, screenshots and files seen by the Financial Times show.

The records offered online by hackers to further their demands for almost $20m in ransom also include internal health service files, such as minutes of meetings, equipment purchase details and correspondence with patients.

Ireland’s Health Service Executive (HSE) has been trying to establish how many patients’ data was compromised by the attack, which forced Ireland to shut down most of the IT systems behind hospitals that serve millions.

The files seen by the FT are the first confirmation that patients’ personal data has been leaked as a result of what Ireland’s leader Micheál Martin described on Tuesday as a “heinous attack”.

The files were offered by the ‘ContiLocker Team’ as samples to prove that they had confidential information, according to screenshots seen by the FT. Conti is the name of the type of cyber attack perpetrated on the HSE. It is characterised by taking control of systems, and stealing data, and is associated with a group operating out of Russia and eastern Europe.

The HSE patient and business files were offered in a chat between ContiLocker Team and an unnamed user, which can be viewed at separate links on the internet and dark web.

The chat includes a link to “samples” of the data Conti has, along with a password to access the samples. The files were emptied when the FT examined the link, but the names of the empty files corresponded to files shared with the FT by a person who accessed the link earlier in the week.

The person said the files had been available for several days, and were found after some details of the attack were shared on a public database used by cyber security professionals. The 27 files include personal records of 12 individuals. One file reviewed by the FT includes admission records and laboratory results for a man who was admitted to hospital for palliative care.

The broad details in that file matched a subsequent death notice seen by the FT. Earlier on Tuesday, Stephen Donnelly, Ireland’s health minister, told an Irish radio show that police were examining “heavily redacted materials” that had been published online, and that Ireland had “no verification that what has been posted is real data”. In the chat, ContiLocker Team claimed the hackers had stolen 700 gigabytes of data including patients’ home addresses and telephone numbers, as well as staff employment contracts, payroll data and financial statements. “The good news is that we are businessmen. We want to receive ransom for everything that needs to be kept secret,” ContiLocker Team added, naming a figure of $19.99m.

Asked about the files seen by the FT, the Irish police said: “An Garda Síochána does not comment on unverified content on social media or provide specific commentary on any ongoing criminal investigation.” Ireland’s National Cyber Security Centre, which is leading Ireland’s investigation into the hack, told the FT that criminal gangs “habitually release stolen information as a means of pressurising organisations into paying a ransom”. “The National Cyber Security Centre is working with the Garda National Cyber Crime Bureau and international partners to identify any such material, verify it and then take all available measures to limit the exposure of the personal data online.”

On Tuesday, Donnelly said the hack was “not just on the HSE, it’s an attack on the people of Ireland”, describing the effects as “heartbreaking”. Doctors have warned that patients will suffer if they continue to be unable to process laboratory results and are forced to postpone appointments.

Is that a hacked FT sub copper?

[Copper_pipe]

No I have a google chrome extension on my laptop that will bypass the paywall on the FT, The Times, Irish Times and many more.

[TheBird]

And this extension can be obtained how?

[Spidey]

PwC holding a cyber threat webinar at 10. I wonder will their advice include telling Bridie not to click on the YouTube cats link.

[Heyyoubehindthebushes]

Or the lidl special voucher. Only 1000 to giveaway

[LionelRitchie]

What extension is that?

[TreatyStones]

Possibly a myth but I’ve actually read of a company doing that. The backups were fucked, so they let the ransomware operators publish the data online and they copied it back down.

[TheUlteriorMotive]

“Is this your car/bike that was damaged in car park?” Photo attached.

Hooks in most lads

[Julio_Geordio]

HSE staff have been told it could/will be 6 weeks before their systems are back up and running

[TreatyStones]

@Julio_Geordio

HSE staff have been told it could/will be 6 weeks before their systems are back up and running

Have they put out a call for volunteers/help in getting things up and running? I’d imagine it would be very difficult to co-ordinate but at the same time you’d have a lot of experienced people who would be willing to help a hospital get back online.

[Julio_Geordio]

@TreatyStones

Have they put out a call for volunteers/help in getting things up and running?

They’ll probably pay someone €40m to get it back up and running

[Big_Dan_Campbell]

Have you your leaving cert results to hand?

[TreatyStones]

@Julio_Geordio

They’ll probably pay someone €40m to get it back up and running

It cost Maersk around $300m
Although there’s was a bit different in that it wasn’t a standard ransomware attack. The attackers in that incident had no intention of recovering the data.

[TheUlteriorMotive]

And they got lucky

[TreatyStones]

@Julio_Geordio

They’ll probably pay someone €40m to get it back up and running

There is going to be a lot of Nuala’s crying that their holiday and baby photos they had saved to their My Documents folder are going to be wiped.

[EstebanSexface]

just pay the fucking ransom. It’ll cost 10 times more otherwise, and have a health impact

[TheUlteriorMotive]

We don’t negotiate with terrorists***

***Apart from SF IRA.