cognitive cybersecurity intelligence

News and Analysis

Search

MedSave Health Insurance TPA Cyber Attack; Company Remains Silent – DataBreaches.Net

Well, pull up a chair and have a cuppa, I’ve got a cracking story for you. Remember the dastardly villain character from the movies that you love to root against? Our story involves a similar villain, a bit of code for a person really, who goes by the moniker “0mid16B”. This tech-savvy rascal has been creating quite a fuss in the world of data security, particularly for a certain Indian company, MedSave.

You see, MedSave is a major player in the Indian healthcare scene. They work their socks off processing and settling insurance claims associated with more than 10 different insurance companies and affiliating with thousands of hospitals in India. They’re one of the big wigs in their industry in India, shaping the future of healthcare one transaction at a time.

Now, 0mid16B, having decidedly more nefarious intentions, decided to tap into MedSave’s system, sneakily pilfering an astronomical amount of data. According to this clever little thief, they made off with more than 500 gigabytes of various databases, containing oodles of corporate, financial, and personal data, stretching across a staggering 10 million plus people. Quite the haul, isn’t it?

This digital swindler even had the audacity to present their spoils. As proof of their conquest, they showcased a list of file names including quite a bit of information like employee identification, contact details, address, gender, and marital status. Cheeky, isn’t it?

Now, here is where it gets really interesting. This vigilante of vested interests claimed that they had continued access to the system, even boasting about paralyzing their security system thrice in just four days. Imagine the trouble caused at MedSave!

The audacity of 0mid16B didn’t just stop at their brazen activities. This wily hacker took a moment to openly criticize MedSave’s lackluster security measures, pointing out that no alarms were raised during the theft of such a mammoth amount of data nor were there any efforts to investigate the root of the breach. They labelled MedSave as negligent, accusing this major company of putting millions of customers at risk.

Following the revelations, MedSave’s official site became inaccessible – a 403 Forbidden message began to flash upon the scene. It seems like the proverbial cat was out the bag and they were in hot water. Of course, there was an attempt to reach out to them, to hear their side of the story, but there has been no response.

So, what happens now? Well, according to our mysterious wrongdoer, they plan to sell some of the data and leak non-customer information. Their exact motive remains unclear.

The story is still unravelling and I’ll be sure to keep you posted if anything changes. But let this tale serve as a reminder that the world of healthcare and cybersecurity is every bit as thrilling as any Hollywood blockbuster. As this tale continues to unfold, let’s hope it serves as a wake-up call for stronger data protection practices.

by Parker Bytes

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts