The University Hospital of New Jersey (UHNJ) suffered a massive data breach as 48,000 records were exposed following a ransomware attack .
University Hospital is a state teaching hospital in New Jersey that has been providing medical care to residents since 1994. It has a budget of $626 million and employs over 3,500 employees, has 519 beds, and over 172,000 annual outpatient visits.
The SunCrypt ransomware group recently leaked data allegedly stolen from UHNJ as a result of a attack that took place in September.
This is a ransomware group that began its activities in October 2019 but was not particularly active. However, in recent months they have come to the fore, after the creation of their website.
As BleepingComputer , the data published by the malicious actors appears to belong to the University Hospital.
Of the 240GB of data allegedly stolen, the attackers have leaked a 1.7GB file containing over 48,000 documents.
The leaked data contained information such as patient release information, copies of driver's licenses, social security numbers (SSNs), dates of birth, and records for the Board of Directors.
According to a source uncovered by BleepingComputer, a hospital employee was infected with the TrickBot trojan in late August. When a computer is infected with TrickBot, it usually results in the ransomware taking over the entire network
TrickBot leads to Ryuk ransomware attacks and occasionally Maze ransomware attacks. Now TrickBot mainly promotes Conti ransomware.
While Maze denies any connection to SunCrypt, the providers of the SunCrypt ransomware have told BleepingComputer that it is part of the Maze Cartel. Furthermore, when it infects a victim, SunCrypt will connect to an IP address that was previously associated with Maze.
