From bad to worse: Doctor Alliance hacked again by same threat actor

According to ISMG, Doctor Alliance faced a renewed data breach after a threat actor known as Kazu claimed a second intrusion, following an initial breach in which 353 GB of data were allegedly exposed and a $200,000 ransom was demanded with a November 21 deadline.

Kazu said the second hack yielded approximately 5 million files, including 3,740,129 signed documents (917 GB) and 1,240,640 unsigned files (353 GB), totaling nearly 1.27 terabytes of stolen data, with the forum listing later updated to demand $500,000 and a November 25 deadline. The actor alleged the second breach reused the same vulnerability and involved a high-privilege account, with credentials allegedly found by inspecting infostealer logs.

Doctor Alliance acknowledged unauthorized access involving a single client account, saying the issue was contained and the vulnerability corrected the same day, and that independent security experts were conducting a thorough analysis, while they had not verified the circulating claims or numbers.

DataBreaches notes that four potential class-action lawsuits have been filed in a federal court in the Northern District of Texas, underscoring the legal pressures facing the firm as it contends with the ongoing allegations.