The REVIL ransomware gang, also known as Sodinokibi, has hacked “The Hospital Group” and is threatening to leak “before” and “after” plastic surgery photos of celebrity clients. “The Hospital Group” currently has 11 clinics and a wide celebrity clientele. Its clinics specialize in bariatric weight loss surgery, breast augmentation, nipple correction, and rhinoplasty. Now it has been targeted by hackers, as the REVIL ransomware gang claims to have hacked systems and is threatening to leak sensitive photos of its celebrity clients.
The Hospital Group confirmed the ransomware attack and informed the Information Commissioner of the security breach . It also notified all its customers via email about the incident.
In addition, The Hospital Group stated the following: “We can confirm that our IT systems have suffered a data. None of our customers’ payment card details have been compromised, but at this stage, we understand that some of our patients’ personal data may have been compromised.
The operators of REVIL ransomware have posted some photos of the compromised systems on a data leak site hosted on the Tor network, claiming to have stolen approximately 600 GB of documents. The stolen data includes personal customer data as well as sensitive/controversial photos of them.
The REVIL ransomware gang plans to release a batch of files, named “Pacient Personal – 20гб TMG OFFICIAL Documents – 50гб” this week. It is worth noting that this is one of the most significant ransomware operations, active since April 2019.
In a recent interview, a member of the REVIL gang stated that the ransomware operation in question earns over $100 million annually from ransom payments made by victims after blackmailed by hackers.
The list of the gang's victims is long and includes the following: Travelex, Kenneth Cole, SeaChange, Brown-Forman, BancoEstado, Grubman Shire Meiselas & Sacks (GSMLaw), Valley Health Systems, Telecom Argentina, Managed.com and Lion.
