amvinfe

Cyber security researcher and blogger

Last Notes

2026-06-05 16:50:48 UTC

𝐒𝐢𝐧𝐠𝐢𝐧𝐠 𝐑𝐢𝐯𝐞𝐫 𝐇𝐞𝐚𝐥𝐭𝐡 𝐒𝐲𝐬𝐭𝐞𝐦: 𝐁𝐞𝐭𝐰𝐞𝐞𝐧 𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞, 𝐋𝐞𝐠𝐚𝐥 𝐃𝐢𝐬𝐩𝐮𝐭𝐞𝐬, 𝐚𝐧𝐝 𝐑𝐞𝐜𝐮𝐫𝐫𝐢𝐧𝐠 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬
Just over two years after the devastating ransomware attack attributed to the Rhysida group, Singing River Health System (SRHS) has once again fallen victim to cybercrime. This time, the Anubis ransomware group has claimed responsibility for compromising the healthcare organization’s IT systems, stating that it stole sensitive data belonging to patients and employees before encrypting the infrastructure.
https://www.suspectfile.com/singing-river-health-system-between-ransomware-legal-disputes-and-recurring-vulnerabilities/
#Anubis #Data_Breach #HIPAA #PII #PHI #Ransomware #Rhysida #Singing #SRHS
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/698/529/059/245/556/original/2035851db3cc57e2.jpg

2026-05-25 17:44:36 UTC

𝐔𝐧𝐢𝐯𝐞𝐫𝐬𝐢𝐭𝐚𝐭 𝐝𝐞 𝐕𝐚𝐥𝐞̀𝐧𝐜𝐢𝐚 𝐓𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐛𝐲 𝐍𝐨𝐯𝐚 𝐆𝐫𝐨𝐮𝐩: 𝟑𝟎𝟎𝐆𝐁 𝐃𝐚𝐭𝐚 𝐄𝐱𝐟𝐢𝐥𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐂𝐥𝐚𝐢𝐦𝐞𝐝, 𝐈𝐧𝐢𝐭𝐢𝐚𝐥 $𝟓𝟎𝟎,𝟎𝟎𝟎 𝐑𝐚𝐧𝐬𝐨𝐦 𝐃𝐞𝐦𝐚𝐧𝐝 𝐑𝐞𝐯𝐞𝐚𝐥𝐞𝐝
News of the attack was initially reported by the online newspaper Escudo Digital in an article by journalist Alberto Payo, which included statements attributed to a member of the university’s IT team. These details are now complemented by statements provided exclusively to SuspectFile.com directly by the Nova group, introducing additional information that had not previously emerged publicly, including an alleged initial ransom demand of $500,000.
https://www.suspectfile.com/universitat-de-valencia-targeted-by-nova-group-300gb-data-exfiltration-claimed-initial-500000-ransom-demand-revealed/
#Data_Breach #Data_Exfiltration #Nova #Ransomoware #Universitat_de_València
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/636/455/095/587/720/original/049bcf76e3fbb5d9.jpg

2026-05-18 01:21:39 UTC

𝐒𝐢𝐧𝐜𝐞 𝐖𝐡𝐞𝐧 𝐃𝐢𝐝 𝐀𝐬𝐤𝐢𝐧𝐠 𝐟𝐨𝐫 𝐄𝐯𝐢𝐝𝐞𝐧𝐜𝐞 𝐁𝐞𝐜𝐨𝐦𝐞 “𝐃𝐞𝐟𝐞𝐧𝐝𝐢𝐧𝐠 𝐂𝐫𝐢𝐦𝐢𝐧𝐚𝐥𝐬”?
Dissent responded harshly to these accusations, firmly rejecting any insinuation of collusion with criminal groups. The journalist pointed out that every time she asks for evidence to support certain claims, she is labeled “criminal-friendly” or accused of being a mouthpiece for cybercriminals, simply for refusing to uncritically accept statements lacking public verification.
https://www.suspectfile.com/since-when-did-asking-for-evidence-become-defending-criminals/
#Canvas #Data_Breach #Instructure #Navigate360 #Ransom #ShinyHunters
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/592/953/714/939/444/original/67456131572818ce.jpg

2026-03-19 14:34:40 UTC

𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 𝐚𝐭𝐭𝐚𝐜𝐤 𝐨𝐧 𝐔𝐌𝐌𝐂: 𝐌𝐞𝐝𝐮𝐬𝐚 𝐜𝐥𝐚𝐢𝐦𝐬 𝟏 𝐓𝐁 𝐨𝐟 𝐞𝐱𝐟𝐢𝐥𝐭𝐫𝐚𝐭𝐞𝐝 𝐝𝐚𝐭𝐚 𝐚𝐬 𝐧𝐞𝐰 𝐝𝐞𝐭𝐚𝐢𝐥𝐬 𝐞𝐦𝐞𝐫𝐠𝐞
𝐍𝐞𝐠𝐨𝐭𝐢𝐚𝐭𝐢𝐨𝐧𝐬 𝐚𝐧𝐝 𝐫𝐚𝐧𝐬𝐨𝐦 𝐝𝐞𝐦𝐚𝐧𝐝
#Medusa stated that negotiations took place over several weeks with representatives of #UMMC. According to the group, the organization offered $550,000, an amount that was rejected as insufficient.
The group did not specify the initial demand but indicated a figure of $800,000 for the deletion of the exfiltrated data.
According to the attackers’ account, the mismatch between the offer and their expectations led to the breakdown of negotiations.
https://www.suspectfile.com/ransomware-attack-on-ummc-medusa-claims-1-tb-of-exfiltrated-data-as-new-details-emerge/
#HIPAA #Infosec #Ransomware #SSN
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/256/333/858/997/550/original/b4f9c25921a3cecf.jpg