Star Health hit with $68,000 ransom demand after data breach

Photo: Reuters/Dado Ruvic

NEW DELHI, (REUTERS) – Star Health, India’s largest health insurer, said on Oct. 12 that it had received a $68,000 ransom demand from a hacker in connection with a leak of customer data and medical records.

Star, which has a market capitalization of roughly $4 billion, has been battling a reputational and business crisis since Reuters reported on Sept. 20 that a hacker had used Telegram chatbots and a website to leak sensitive customer data, including tax details and medical claim documents.

The company, whose shares are down 11%, has launched internal investigations and legal action against Telegram and the hacker, whose website continues to share samples of Star customer data.

Star, which has previously said it is a “victim of a targeted malicious cyber attack”, has now revealed for the first time that in August “the threat actor demanded a ransom of $68,000 in an email” targeted to the company’s general manager and his boss. executive

The statement came after Indian stock exchanges sought clarification from Star following a Reuters report that the company was investigating allegations that its chief security officer was involved in the data breach.

Star reiterated that it has found no wrongdoing by the officer, Amarjeet Khanuja, although the internal investigation is ongoing.

Telegram has refused to share account details or permanently ban accounts linked to the hacker, an individual named xenZen, “despite multiple warnings issued to that effect,” Star said.

Star said it has “requested the assistance” of Indian cyber security authorities to “help us identify” the hacker.