The WikiLeaks Web site, which monitors data breaches, on April 30 posted on its Web site a purported ransom note from the hacker, calling for $10 million to return the information covering 35.6 million prescriptions, according to several published reports. The hacker claimed to have deleted original and back up copies after creating an encrypted backup, and will provide the password to the backup after ransom is paid.
The Virginia Department of Health Professions operates the computer system to support the state's controlled substances prescription monitoring program. Physicians and pharmacists submit prescription information to the system. They also can query the system to find out if a patient is receiving the same controlled substance prescription or prescriptions from other physicians.
Portions of the monitoring program's Web site have been taken off line. Department officials did not immediately return a telephone call asking for comment.
It is unclear whether affected information includes Social Security numbers and driver's license numbers, as the hacker claimed, according to the Times-Dispatch.
The profanity-laced ransom note, which the hacker placed on the prescription monitoring program's Web site but has since been removed, is available at wikileaks.com/leak/virginia-ransom-2009.html.
--Joseph Goedert
Be the first to comment on this post using the section below.