Threat Actor: Dispossessor | Dispossessor
Victim: Aire Dental Arts | Aire Dental Arts
Price: N/A
Exfiltrated Data Type: Sensitive patient information
Key Points :
- Claims a major data breach affecting multiple organizations.
- Affected patients will receive instructions on legal claims against Aire Dental Arts.
- Allegations of negligence in safeguarding personal health information could increase liability.
Threat Actor: Dispossessor | Dispossessor
Victim: Turssso Companies | Turssso Companies
Price: N/A
Exfiltrated Data Type: Employee, project, contract, and partner data
Key Points :
- Files containing personal and professional data of employees were exfiltrated.
- Proprietary information and project/contract details were compromised.
- Affected parties are advised to document communication for legal review.
Threat Actor: Dispossessor | Dispossessor
Victim: VCUarts Qatar | VCUarts Qatar
Price: N/A
Exfiltrated Data Type: Student and employee data, project information
Key Points :
- Data related to students, employees, and projects was stolen.
- Potential administrative fines and penalties from the Qatar Ministry of Transport and Communications for data protection violations.
Threat Actor: Dispossessor | Dispossessor
Victim: Delhi Hospital | Delhi Hospital
Price: N/A
Exfiltrated Data Type: Patients’ health data
Key Points :
- Allegations of unauthorized disclosure of patients’ information.
- A video was released claiming that patients’ health data has been leaked.
Threat Actor: Dispossessor | Dispossessor
Victim: Multiple Organizations | Multiple Organizations
Price: N/A
Exfiltrated Data Type: Various sensitive data types
Key Points :
- Plans to release a one-hour video for each victim detailing the analysis of exfiltrated data.
- Aims to inform affected parties of their rights and guide them on seeking justice.
- Deadlines for accessing files vary by organization, with the earliest being August 2 for Delhi Hospital.
Dispossessor ransomware claims to a major data breach affecting four organizations: Aire Dental Arts, Turssso Companies, VCUarts Qatar, and Delhi Hospital. The ransomware group has released detailed statements on their leak site, outlining the nature of the stolen data and potential legal implications for each organization.
Aire Dental Arts
The ransomware group claims that the stolen data includes sensitive patient information. According to the statement, affected patients will receive detailed instructions on how to proceed with legal claims against Aire Dental Arts. Dispossessor alleges that any negligence by Aire Dental Arts in safeguarding personal health information could lead to increased liability.
Turssso Companies
Dispossessor claims that they have exfiltrated files from Turssso Companies containing data related to employees, projects, contracts, and partners. They assert that the breach compromised personal or professional data of employees, proprietary information, and project/contract details. The group advises affected employees, partners, and stakeholders to document all communication records for legal review.
VCUarts Qatar
Dispossessor states that they have stolen files from VCUarts Qatar, including data related to students, employees, and projects. The statement notes that the Qatar Ministry of Transport and Communications oversees data protection regulations, and VCUarts Qatar could face administrative fines and penalties for violations.
Delhi Hospital
Dispossessor alleges that they have disclosed patients’ information from Delhi Hospital without authorization. They released a video claiming that they have leaked patients’ health data.
Dispossessor plans to release a comprehensive one-hour video for each victim, detailing the analysis of the exfiltrated data and legal implications. They aim to inform all affected parties of their rights and guide them on the steps to seek justice. 
The deadlines for accessing the files are as follows: Aire Dental Arts on August 9, Turssso Companies on August 6, VCUarts Qatar on August 4, and Delhi Hospital on August 2.
The post Dispossessor Ransomware Group Claims to Hack of Education and HealthCare Organizations appeared first on Daily Dark Web.