🌐 Deep Dark Web Weekly Highlights in March W3

⚠️Personal Information Leak: Insurance

On March 9, a data breach was discovered in the personal information database of customers who had enrolled in one of the United States' online health insurance marketplaces, Washington D.C. Health ****. The compromised data was found to have been released on a prominent hacking forum named “Breached.”      The threat-actor posted a hyperlink directing users to a compressed file that is roughly 6 megabytes in size and contains two CSV files. The aforementioned files contain approximately 110,000 records of personally identifiable information belonging   to insurance policyholders.

⚠️Personal Information Leak: Medical

It has recently come to light that data, which was stolen from a hospital located in China, is being marketed for sale on a prominent hacking forum called "Breached." The threat-actor responsible for the breach, identified as "datelover," has made available for sale the compromised data, providing a sample that showcases the breadth of the leak. The data encompasses the personal details of nearly 900,000 individuals who visited the hospital, including their names, dates of birth, genders, contact information, addresses, and medical records (diagnoses, prescriptions, and attending physician information, among others).

⚠️Confidential Leak: Government

Recently, there have been reports of two separate threat-actors targeting Indonesia. The first threat-actor has left traces of hacking the website of an Indonesian government agency, while the second threat-actor is stealing data from the Indonesian government and publicly releasing it for free, causing a stir among dark web hacking forum users. "Madaya," an active member of the notorious hacking forum "Breached," has been primarily targeting data from Indonesian government agencies and companies. They then distribute the compromised data for free on the forum. The number of confirmed victims of this activity has now reached around 20.