Document tech firm hit as new cyber gang expands reach

Kazu, a relative newcomer among cybercrime gangs, is threatening to post 353 gigabytes of data allegedly stolen in recent weeks from Doctor Alliance, a Texas-based company that provides document and billing management technology and services to physician practices. The attack appears to be the gang’s first in North America.

Doctor Alliance in a statement to Information Security Media Group on Friday said the firm is working with independent security experts to investigate Kazu’s claims of having exfiltrated 1.2 million Doctor Alliance client records. Kazu is demanding Doctor Alliance pay a $200,000 ransom to stop the gang from publishing the stolen data on the dark web.

Leaked Doctor Alliance client data so far includes patients name, date of birth, address, phone number, email address, Medicare number, medical record number, primary and secondary diagnoses, treatment plans, medications and dosages, and provider information, according to one of three proposed federal class action lawsuits filed this week against the company related to the hack.

Read more at Healthcare Info Security