hiveleak attacks Macquarie Health Corporation

Incident Date:

January 25, 2022

World map

Overview

Title

hiveleak attacks Macquarie Health Corporation

Victim

Macquarie Health Corporation

Attacker

Hiveleak

Location

Catherine, Australia

Leichhardt, Australia

First Reported

January 25, 2022

Macquarie Health Corporation Suffers Ransomware Attack

Macquarie Health Corporation, an Australian healthcare provider, has been targeted by the ransomware group HiveLeak. The attack was announced on the dark web leak site, and the victim's website is machealth.com.au. Macquarie Health Corporation operates in the Healthcare Services sector and has a rich history, having been established in Sydney, Australia, in 1973.

The company has a diverse range of services, including private hospitals, medical and commercial real estate, medical and dermascopy products, and eHealth informatics. Macquarie Health Corporation is one of the nation's leading providers of healthcare services, with 12 private hospitals, Macquarie Medical Systems, MacRehab, Machealth eHealth solutions, and Pen CS ehealth informatics and data solutions.

The ransomware attack on Macquarie Health Corporation is part of a growing trend of cyber threats in the healthcare industry. In 2021, the ransomware group Ryuk was suspected of targeting medical facilities, and the Conti ransomware attack on the HSE in Ireland disrupted health services and IT systems.

The healthcare sector is particularly vulnerable to ransomware attacks due to the sensitive nature of the data they handle. Cybercriminals can disrupt services, steal data, and demand a ransom for the non-publication of stolen data and the provision of a tool to restore access to data they have encrypted.

Despite the increasing frequency and sophistication of cyber attacks, healthcare organizations must continue to prioritize cybersecurity to protect their patients and operations.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.