I was genuinely disturbed and intrigued by the Vastaamo breach where a hacker managed to obtain 40000 patient records, send out emails threatening to release their data. Imagine if your most intimate thoughts and fears where out there. Full transcripts from the computer system of a mental health facility. 

How do you prevent something like this? We owe it to our patients to be better at cyber security Medsec/ Healthcare Sec. 

Useful links:

https://haveibeenpwned.com/

https://darknetdiaries.com/

https://www.youtube.com/watch?v=bsZq-BiKqfY

 

sources:

https://twitter.com/mikko/status/1320061214647439360?lang=en

https://therecord.media/hacker-directly-targets-patients-following-a-data-breach-at-a-finnish-mental-health-provider/ 2/4 

https://www.politico.eu/article/cybercriminal-extorts-finnish-therapy-patients-in-shocking-attack-ransomware-blackmail-vastaamo/

https://hotforsecurity.bitdefender.com/blog/vastamo-hacker-says-he-doesnt-care-if-therapy-leaks-drive-patients-to-suicide-24408.html 

https://www.avesnetsec.com/psychotherapy-ransom

https://twitter.com/nulllzero?lang=en