Threat Actor Claims Hospital Universitario del Valle Patient Data Theft

Summary
An unidentified threat actor claims to have stolen about 25 GB of Hospital Universitario del Valle patient data and is reportedly offering it for $500. The claim and alleged data theft are unverified.
Key points
- An unidentified actor claims to have exfiltrated approximately 25 GB, described as 264,454 lines, from Hospital Universitario del Valle in Cali, Colombia.
- The allegedly stolen data includes personal identifiers, contact details, clinical laboratory results, radiographs, and other medical information.
- The actor is reportedly attempting to sell the database for $500 on a cybercrime forum.
- The article provides no independent confirmation of the alleged breach or data sale.
Article Details
- Victim Organization
- Hospital Universitario Del Valle (HUV)
- Incident Type
- Alleged data breach and data exfiltration
- Data Types Exposed
- Personal identifiers
- Contact details
- Addresses
- Birth dates and ages
- Clinical records and laboratory results
- Radiographs
- Treating physician and registry details
- Hospital service, ward, and bed information
- Affected Records
- The actor claims the dataset contains 264,454 lines and documents; the number of affected individuals is not stated.
- Affected Data Size
- Approximately 25 GB, according to the actor.
- Operational Impact
- No operational disruption is reported. The article describes potential privacy, clinical safety, and regulatory risks.
- Ransom Or Extortion
- The actor is reportedly attempting to sell the allegedly exfiltrated database for $500.
- Claim Status
- claimed
