Actor Claims Access to U.S. Medical Transport Platform and 500,000+ Patient Records
Summary
A threat actor identified as boltak claims to sell authenticated admin access to a U.S. non-emergency medical transport platform, 500,000+ patient records and Smart-Data-Hub source code; the article provides no independent confirmation.
Key points
- The article attributes the sale claim to a threat actor identified as boltak; it does not name the affected platform or independently verify the alleged breach.
- The actor allegedly offers authenticated administrator access and more than 500,000 patient records.
- The claimed records include personally identifiable information, Social Security numbers, insurance details and medical records.
- The article says the access could enable provider creation, ride-assignment manipulation and invoices for services not provided; these are alleged capabilities, not confirmed activity.
- The listing allegedly includes Smart-Data-Hub source code and access to a network of more than 200 subcontractors linked to Lyft and Uber Health.
Article Details
- Victim Organization
- Not disclosed
- Incident Type
- Alleged breach involving claimed sale of authenticated administrative access, patient records, and Smart-Data-Hub source code
- Data Types Exposed
- Personally identifiable information (PII)
- Social Security numbers (SSNs)
- Insurance details
- Sensitive medical records
- Affected Records
- More than 500,000 patient records, according to the threat actor's claim
- Operational Impact
- The claimed live administrative access could allow fake provider creation, ride-assignment manipulation, and invoice generation for services not performed. No actual operational disruption is confirmed.
- Ransom Or Extortion
- boltak claims to be selling administrative access, patient records, and Smart-Data-Hub source code; no ransom demand is reported.
- Claim Status
- claimed