DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Ransomware attackers pledge to back off attacking medical entities during pandemic

Posted on March 19, 2020 by Dissent

“We’re all in this together” took on new meaning yesterday when a ransomware gang published a statement saying that they were offering their victims (whom they refer to as “partners”) discounts. And in response to an inquiry by Lawrence Abrams of Bleeping Computer, Maze Team also committed to not attacking medical entities during this pandemic crisis, writing, “We also stop all activity versus all kinds of medical organizations until the stabilization of the situation with virus.”

Maze Team Press Release

It is not the first time these particular threat actors have made decisions or claims that they frame as being the ethical thing to do. Recently, for example, they had informed DataBreaches.net that they had removed Crossroads Technology’s clients’ data from their website, and had actually assisted some of the hospices by providing free recovery (decryptors) to them.

Blackhats with a heart or ethics? It seems surprising, doesn’t it? But from the beginning, Maze Team had shared some of their thoughts about ethics and morality of what they do. In January, they had responded to an emailed inquiry about how they choose their targets, by writing, in part:

We avoid social objects and we try to avoid large medical centers specializing not just in diagnostics, but in treating patients, so as not to inadvertently cause real physical harm to patients of clinics, therefore the medical topic for us is more an accident than a pattern and deliberate attacks.

So their press release this week is not really inconsistent with what they had said months ago, but it’s still not what you might expect from blackhats who are financially motivated. Contrast their statements with actions by thedarkoverlord who had mercilessly attacked a little nonprofit in Indiana that was helping cancer patients, and who had a member who expressed excitement to me about the thought of possibly driving a vulnerable student to suicide.

So who is Maze Team really, and what drives them? I’d love to know more, but first and foremost, a public thumbs up to them for backing off on medical entities — and presumably any third-party vendors that are critical to medical entities. It may be a small act of kindness in a time of global crisis, but it is an important one.

Related posts:

  • Maze Team continues its campaign of naming, shaming, and dumping victims’ data while other attackers adopt the same model
  • Ransomware victims keep paying, and ransomware groups keep growing
  • The Ransomware Superhero of Normal, Illinois
  • Liar, Liar, Pants on Fire? Did Maze Team go back on its word to leave medically related facilities alone?
Category: Breach IncidentsCommentaries and AnalysesHackHealth DataMalware

Post navigation

← Rogers notifies customers their personal information may have been compromised
Sodinokibi Ransomware Data Leaks Now Sold on Hacker Forums →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Alert: Scattered Spider has added North American airline and transportation organizations to their target list
  • Northern Light Health patients affected by security incident at Compumedics; 10 healthcare entities affected
  • Privacy commissioner reviewing reported Ontario Health atHome data breach
  • CMS warns Medicare providers of fraud scheme
  • Ex-student charged with wave of cyber attacks on Sydney uni
  • Detaining Hackers Before the Crime? Tamil Nadu’s Supreme Court Approves Preventive Custody for Cyber Offenders
  • Potential Cyberattack Scrambles Columbia University Computer Systems
  • 222,000 customer records allegedly from Manhattan Parking Group leaked
  • Breaches have consequences (sometimes) (1)
  • Kansas City Man Pleads Guilty for Hacking a Non-Profit

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Germany Wants Apple, Google to Remove DeepSeek From Their App Stores
  • Supreme Court upholds Texas law requiring age verification on porn sites
  • Justices nix Medicaid ‘right’ to choose doctor, defunding Planned Parenthood in South Carolina
  • European Commission publishes its plan to enable more effective law enforcement access to data
  • Sacred Secrets: The Biblical Case for Privacy and Data Protection
  • Microsoft’s Departing Privacy Chief Calls for Regulator Outreach
  • Nestle USA Settles Suit Over Job-Application Medical Questions

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.