Nueva EPS, Colombia’s largest regional healthcare promoting entity has allegedly been hacked
Nueva EPS, Colombia’s largest health insurer, allegedly had 11.2 million member records stolen in a $15 million extortion attempt.
Nueva EPS, Colombia’s largest health-promoting entity with about 11.3 million members, is allegedly the target of a data-theft and extortion attempt. A forum user claimed 11,239,741 affiliate records containing national ID numbers, contact details, and extensive medical information, and demanded $15 million in Bitcoin. The person told DataBreaches they used compromised credentials about a week earlier, exfiltrated data, and did not encrypt systems. Nueva EPS said its investigation has not yet found evidence of unauthorized access and that verification is continuing.
- A forum listing claims 11,239,741 Nueva EPS records with detailed health data.
- The actor demanded $15 million in Bitcoin and threatened to leak the data.
- Access was claimed through compromised credentials, with no ransomware encryption.
- Nueva EPS says checks so far found no evidence of unauthorized access.
- ATT&CK
- T1078 Valid Accounts
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | muchohacker.lol | to government headers and data types have been reported by muchohacker[.]lol , who found that the sample schema is consistent with gov |
From the original article
3 min read at databreaches.netColombia’s largest health-promoting entity, Nueva EPS, has allegedly been hacked by an individual demanding $15 million not to leak the data. Colombia’s healthcare system includes Entidad Promotora de Salud (EPS), regional health-promoting entities responsible for implementing objectives set by the Ministry of Health, developing guidelines and protocols, and overseeing healthcare delivery.
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.