Over 8 Million Virginian Patient Records Held to Ransom

Via Wikileaks -

On Thursday, April 30, the secure site for the Virginia Prescription Monitoring Program (PMP) was replaced with a $US10M ransom demand:

"I have your shit! In *my* possession, right now, are 8,257,378 patient records and a total of 35,548,087 prescriptions. Also, I made an encrypted backup and deleted the original. Unfortunately for Virginia, their backups seem to have gone missing, too. Uhoh :(For $10 million, I will gladly send along the password."

The site, https://www.pmp.dhp.virginia.gov/pmpwebcenter/login.aspx appears to have been entirely disabled and is presently unavailable.

The linked file provides the full ransom message.

The PMP is used by pharmacists and others to discover prescription drug abuse.

The PMP declined to comment, although when contacted, appeared to be aware of the issue, instantly referring inquiries to the director of the DHP, who is presently unavailable.

-------------------------------

SSL mirror of the ransom note...
https://secure.wikileaks.org/leak/virginia-ransom-2009.html