NHS Investigating Oracle EBS Hack Claims as Hackers Name Over 40 Alleged Victims

According to NHS England, the United Kingdom’s national health service is listed as a victim of the Oracle E-Business Suite data theft and extortion campaign and is cooperating with the National Cyber Security Centre to investigate. The campaign, which began in early October, has seen the Cl0p ransomware leak site publicly name more than 40 alleged victims, with data from 25 targets reportedly published.

One of the recently named victims is Hitachi subsidiary GlobalLogic, which confirmed that the attackers gained access to HR information for current and former employees, including names, addresses, contact details, dates of birth, passport information, Social Security numbers, salary information and bank details, affecting more than 10,000 individuals. The NHS, along with other organisations named on the leak site, has not necessarily confirmed impact, and many victims have yet to verify their status.