AYUSH Jharkhand allegedly hacked, 3.2 lakh patient records leaked on dark web

New Delhi: Cybersecurity researchers have found that the official website of the Ministry of AYUSH in Jharkhand was breached which has exposed over 3.2 lakh patient records on the dark web, a new report said on Monday.

According to the cybersecurity company CloudSEK, the website's database, amounting to 7.3 MB, holds patient records that include personally identifiable information (PII) and medical diagnoses. The compromised data also contains sensitive information about doctors, including their PII, login credentials, usernames, passwords, and phone numbers.

The data breach was initiated by a threat actor named "Tanaka".

The Ayush website is a critical resource providing information about Ayurveda, Yoga, Naturopathy, Unani, Siddha, and Homoeopathy treatments.

Also read- Delhi AIIMS Hit By Second Cyber Attack In A Year, Security Systems Neutralise Threat

"The link between the compromised data and Ayush Jharkhand's website was established by cross-referencing chatbot and blog post data shared by the threat actor with publicly accessible data on the website," the researchers said.