East Tennessee Children's Hospital updates information on ransomware incident

ransomware incident - DataBreaches.Net

On March 15, this site noted that the East Tennessee Children’s Hospital had posted a notice about an IT security incident. At the time, they did not identify the incident as a ransomware incident.

DataBreaches.net subsequently found some explanation for that notice — a listing on a Russian-language forum offering data from ETCH with numerous screencaps and a compressed archive of files. The listing was posted by a user affiliating with a group they called “NWGEN” and stated that although ETCH had been able to recover from backup, they were “forgetting about the children’s files.” The threat actor claimed that they had “exfiled…