DOJ fees cybersecurity official for assault on Georgia hospital

The Justice Division filed fees towards a former cybersecurity official this week over a 2018 cyberattack on Gwinnett Medical Middle in Georgia.

Vikas Singla was indicted for allegedly stealing data from a digitizing gadget whereas additionally disrupting the hospital’s telephone and printer companies. 

Whereas the indictment didn’t title the corporate the 45-year-old labored for, Bleeping Laptop reported he was chief working officer of a healthcare-focused community safety agency referred to as Securolytics. 

The Marietta-native allegedly had assist with the assault. The indictment stated Singla was “aided and abetted by unknown others” on September 27, 2018 when he hacked into the hospital’s Ascom telephone system in addition to a collection of Lexmark printers and a Hologic R2 Digitizer.

Singla appeared earlier than US Justice of the Peace Decide Linda Walker of the U.S. District Court docket for the Northern District of Georgia on Thursday and was charged with 17 counts of intentional injury to a protected laptop. Every depend carries a sentence of as much as 10 years in jail. 

He’s additionally going through a cost of acquiring data by laptop from a protected laptop.

Lower than a month after the intrusion, Gwinnett Medical Middle started investigating their very own techniques after affected person data appeared on-line, in line with ZDNet. They traced the breach again to an IT intrusion on September 29 — simply two days after Singla’s alleged actions — and stated the attackers have been threatening the 500-bed non-profit hospital. 

After three days, the attackers launched full names, dates of beginning, and gender of some sufferers whereas additionally boasting to information shops about their entry to the hospital’s techniques. 

One of many attackers, indignant that the hospital initially denied it was hacked, messaged safety weblog Salted Hash to tout their management of the hospital, writing, “does GMC have management of this technique. The reply isn’t any. The final time we checked, we personal their Ascom system and their knowledge.”

The FBI and Justice Division didn’t say whether or not the 2 assaults have been related, however Appearing US Legal professional for Georgia Kurt Erskine stated Singla “allegedly compromised Gwinnett Medical Middle’s operations partially for his personal private acquire.” 

Chris Hacker, Particular Agent in Cost of the FBI’s Atlanta Discipline Workplace, added that the cyberattack might have had disastrous penalties and famous that sufferers’ private data was compromised as a consequence of Singla’s alleged actions.