Threat Actor Offers Bausch Health Data, Including 1.6 Million DEA Numbers

Threat Actor: Unknown | unknown
Victim: Bausch Health | Bausch Health
Price: $3 million USD (exclusive buyback)
Exfiltrated Data Type: Sensitive medical information, including 1.6 million DEA numbers

Key Points :

  • The threat actor claims to have over 3TB of data from Bausch Health, potentially linked to a Snowflake security incident.
  • DEA numbers are unique identifiers for healthcare providers to prescribe controlled substances, making this breach particularly concerning.
  • The threat actor offers DEA numbers in packages: $10,000 for 10 numbers, $25,000 for 50 numbers, and $50,000 for 100 numbers.
  • The sale will only occur through a middleman, with no individual sales of DEA numbers allowed.
  • The compromised DEA numbers could enable unauthorized prescriptions for drugs like Adderall and oxycodone.

A threat actor has claimed to be selling a database belonging to Bausch Health, allegedly containing sensitive medical information, including 1.6 million medical DEA numbers and prescriber details. The threat actor asserts that this data is related to a larger breach involving over 3TB of data from Bausch Health Companies, potentially linked to a Snowflake security incident.

A DEA number, as explained by the threat actor, is a unique identifier assigned by the United States Drug Enforcement Administration to healthcare providers, allowing them to prescribe controlled substances. This breach is particularly concerning as it could enable the unauthorized writing of prescriptions for drugs like Adderall, oxycodone, oxycontin, xanax, methadone, and others.

The threat actor has set an “Exclusive Price” of $3 million USD for Bausch Health to buy back the data and prevent its sale. They note that DEA numbers are not easily reset, requiring a cumbersome process that could leave doctors unaware of their compromised status.

For online sales, the data is being offered in packages, with pricing as follows:

$10,000 for 10 DEA numbers
$25,000 for 50 DEA numbers
$50,000 for 100 DEA numbers

The threat actor insists that the sale will occur only in packages and requires a middleman to facilitate the transaction. They emphasize that there will be no individual sales of DEA numbers.

The post Threat Actor Claims to Sell Bausch Health Data, Including 1.6 Million DEA Numbers appeared first on Daily Dark Web.