Ransomware group Interlock today claimed responsibility for a cyber attack on Brockton Neighborhood Health Center, a clinic in Massachusetts.
On December 16, 2024, BNHC announced it was the target of a cyber attack that compromised patients’ personal information.
The compromised data includes names, dates of birth, addresses, diagnoses, conditions, lab results, medications, medical record numbers, health insurance info, and other treatment info. The attack forced BNHC to close for several days. BNHC’s pharmacy reopened on November 15, but noted that the fallout from the attack was still ongoing.
“On November 18, 2024, the investigation determined that an unknown actor viewed or copied certain files from our systems between November 1, 2024 and November 3, 2024. We then reviewed our records to identify individuals whose information may have been affected by this event,” BNHC’s notice to victims states. “On November 29, 2024, we determined that personal information related to certain current or former patients who were treated at BNHC between 2017 and 2022 may have been present in the affected files.”
Interlock claims it stole 1,930 GB of data from BNHC. The group posted an image of what it says is a list of directories containing stolen data as proof of its claim.
BNHC has not verified Interlock’s claim. We do not yet know how many patients are affected, whether BNHC paid a ransom, how much Interlock demanded, or how attackers breached BNHC’s network. Comparitech contacted BNHC for comment and will update this article if it responds.
Who is Interlock?
Interlock is a new ransomware gang that first started adding targets to its leak site in October 2024.
Interlock has claimed five confirmed ransomware attacks to date, plus six unconfirmed attacks that haven’t been acknowledged by the targeted organizations.
Yesterday, we reported Interlock’s attack on Texas Tech University Health Sciences Center, which notified nearly 1.5 million people about the breach.
Ransomware attacks on US healthcare
Ransomware attacks can disrupt day-to-day operations and force hospitals, clinics, and other healthcare providers to divert patients and cancel appointments. Ransomware can cripple systems used for prescriptions, billing, payroll, and appointment booking. Many ransomware groups also steal data that can later be used to extort hospitals for even more money.
Comparitech researchers logged 139 confirmed ransomware attacks on US healthcare providers so far in 2024, compromising about 117.5 million records.
Other such recently confirmed attack’s include those on Watsonville Community Hospital, PrimaryPlus, Artivion, and American Addiction Centers.
About Brockton Neighborhood Health Center
Brockton Neighborhood Health Center is a medical clinic and community health center in Brockton, Massachusetts. It cares for 39,000 patients, according to its website.
