The group reportedly told the website it exfiltrated 70 gigabytes of data from Whiteville, N.C.-based Columbus Regional Healthcare System and planned to leak more than 250,000 files “within the next day or so.” Daixin reportedly first asked the health system for $2 million but lowered its demand to $1 million before Columbus Regional stopped negotiating.
“This attack was very simple,” the Daixin spokesperson reportedly told DataBreaches.net. “There were a lot of vulnerabilities. If there is a simple way [to gain access] with obvious vulnerabilities, there is no point in using complicated methods. You could have hacked them using the tutorial from YouTube. … It took one pentester [penetration tester] an hour to get full control.”
The health system hasn’t responded to requests for comment from Becker’s or DataBreaches.net.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.