May 7, 2009 By Hilton Collins
The FBI and the Virginia State Police are on the hunt for a malicious hacker who breached millions of medical records last week and is now threatening to sell them unless someone forks over $10 million.
The breach was originally reported on WikiLeaks, a site that publishes and comments on reports of leaked documents. According to the site, when people logged on to the Web site of the Virginia Prescription Monitoring Program on April 30, they saw a ransom note containing the following information:
"I have your s@*t! In *my* possession, right now, are 8,257,378 patient records and a total of 35,548,087 prescriptions. Also, I made an encrypted backup and deleted the original. Unfortunately for Virginia, their backups seem to have gone missing, too. Uhoh :(
"For $10 million, I will gladly send along the password. You have 7 days to decide. If by the end of 7 days, you decide not to pony up, I'll go ahead and put this baby out on the market and accept the highest bid."
The note's author threatened to sell the information to the highest bidder if the money isn't turned over.
Thursday was the purported deadline for the ransom.
The Virginia Prescription Monitoring Program Web site, which pharmacists use to track drug prescriptions to monitor narcotics abuse, is currently offline while authorities investigate the problem, the Daily Mail reported Thursday.
ABC 7 News also reported Thursday that Virginia Gov. Tim Kaine told The Associated Press that he was infuriated by the acts and that the state won't make the payments.
Health officials called the FBI after viewing the ransom demand on the Web site last week.
If more than 8 million patient records are up for grabs, this could be a spectacularly huge problem for most of Virginia's residents. According to the U.S. Census Bureau, Virginia was home to 7.8 million people in 2008.
Sandra Whitley Ryals, director of the Virginia Department of Health Professions, told the Daily Mail that her department is satisfied that all the data was properly backed up.
This Digital Communities white paper highlights discussions with IT officials in four counties that have adopted shared services models. Our aim was to learn about the obstacles these governments have faced when it comes to shared services and what it takes to overcome those roadblocks. We also spoke with several members of the IT industry who have thought long and hard about these issues. The paper offers some best practices for shared government-to-government services, but also points out challenges that government and industry still must overcome before this model gains widespread adoption.