A ransomware gang has posted photos of Lehigh Valley Health Network cancer patients on the dark web after the health network refused to pay a ransom last month following a cyberattack.
“This unconscionable criminal act takes advantage of patients receiving cancer treatment, and LVHN condemns this despicable behavior,” the network said in a prepared statement.
ALPHV, also known as BlackCat, is associated with Russia and known for similar cyberattacks in academia and healthcare sectors. The group posted a message Saturday night saying it had stolen patient data including nude photos, passports, and questionnaires, and was ready to publish it.
LVHN released a statement last month on the ransomware attack, saying it involved information and patient images for radiation oncology treatment from a single physician practice in Lackawanna County.
LVHN found unauthorized activity on its IT system Feb. 6, and notified law enforcement, LVHN President and CEO Brian A. Nester said Feb. 20.
Sarah Cassi may be reached at email@example.com.