India's Star Health says it received $68k ransom demand after data leak
By Munsif Vengattil and Aditya Kalra
NEW DELHI, Oct 12 (Reuters) -Star Health STAU.NS, India's biggest health insurer, on Saturday said it had received a ransom demand of $68,000 from a cyberhacker in connection with a leak of customer data and medical records.
Star, which has a roughly $4 billion market cap, is battling a reputational and business crisis since Reuters reported on Sept. 20 that a hacker had used Telegram chatbots and a website to leak customers' sensitive data, including tax details and medical claim papers.
The company, whose shares have declined 11%, has launched internal investigations and has taken legal action against Telegram and the hacker, whose website continues to share samples of Star customers' data.
Star, which has previously said it is a "victim of a targeted malicious cyberattack", on Saturday revealed for the first time that in August "the threat actor demanded a ransom of $68,000 in an email" addressed to the company's managing director and its chief executive.
The statement came after Indian stocks exchanges sought clarifications from Star on a Friday over a Reuters report that the company was investigating allegations that its chief security officer was involved in the data leak.
Star reiterated on Saturday it has found no wrongdoing by the official, Amarjeet Khanuja, though the internal investigation is ongoing.
Telegram has declined to share the account details or permanently ban accounts linked to the hacker - an individual dubbed xenZen - "despite multiple notices issued in this regard," Star said on Saturday.
Star said it has "sought the assistance" of Indian cyber security authorities to "help us identify" the hacker.
Telegram did not respond to a request for comment.
The Dubai-based messenger app has previously said it removed the chatbots when Reuters flagged them to the platform.
Reporting by Aditya Kalra and Munsif Vengattil
Latest News
Disclaimer: The XM Group entities provide execution-only service and access to our Online Trading Facility, permitting a person to view and/or use the content available on or via the website, is not intended to change or expand on this, nor does it change or expand on this. Such access and use are always subject to: (i) Terms and Conditions; (ii) Risk Warnings; and (iii) Full Disclaimer. Such content is therefore provided as no more than general information. Particularly, please be aware that the contents of our Online Trading Facility are neither a solicitation, nor an offer to enter any transactions on the financial markets. Trading on any financial market involves a significant level of risk to your capital.
All material published on our Online Trading Facility is intended for educational/informational purposes only, and does not contain – nor should it be considered as containing – financial, investment tax or trading advice and recommendations; or a record of our trading prices; or an offer of, or solicitation for, a transaction in any financial instruments; or unsolicited financial promotions to you.
Any third-party content, as well as content prepared by XM, such as: opinions, news, research, analyses, prices and other information or links to third-party sites contained on this website are provided on an “as-is” basis, as general market commentary, and do not constitute investment advice. To the extent that any content is construed as investment research, you must note and accept that the content was not intended to and has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such, it would be considered as marketing communication under the relevant laws and regulations. Please ensure that you have read and understood our Notification on Non-Independent Investment. Research and Risk Warning concerning the foregoing information, which can be accessed here.
