Apparently, medical records are a hot commodity on the dark web. A hacker by the handle of "thedarkoverlord" is selling health records of 650,000 million patients.

The records were stolen from three health care providers located in Farmington, Mo., the Central or Midwestern U.S., and Georgia, respectively.

The going price ranges from 151 bitcoins (nearly $100,000) to 607 bitcoins (nearly $400,000). The hacker says that he has already sold $100,000 in records belonging to the Georgia facility and it is speculated that he is extorting the institution for additional funds to not continue the sales.

The hacker left a message on the DeepDotWeb: “Next time an adversary comes to you and offers you an opportunity to cover this up and make it go away for a small fee to prevent the leak, take the offer. There is a lot more to come.”

It is speculated that the hacker got a foothold into the systems via a spear phishing campaign.

Source: SCMagazine