A ransom hacking group claims it has breached internal systems of the rare disease pharmacy PantherX Rare to obtain sensitive customer data, just as the company’s bankers are attempting to offload loans backing its buyout by Warburg Pincus.
The hacker group, known as Storm, posted information about PantherX on its website on Monday (14 September). The site is accessible through the dark web Tor network, and is not available through normal web browsers.
The portal has been intermittently down over recent days, according to ransomware surveillance project ransomlook.io. 9fin has independently verified the existence of the ransom page and analyzed some of the contents, including a number of screenshots purporting to show stolen data.
The screenshots show patient information, including social security numbers, medical test results and doctor’s orders. At least two of the listed patients’ names and identifying information match publicly available property and voter registration records, and multiple doctors listed in the screenshots match with profiles in the Centers for Medicare and Medicaid Services National Provider Identifier database.
When reached by phone, two additional patients confirmed to 9finthat their names, personal details and medical information mentioned in the cache of screenshots are accurate. Those patients...
