Interlock ransomware claims the breach at Texas Tech University

The Interlock ransomware group has claimed responsibility for the data breach attack on the Texas Tech University Health Sciences Center and its El Paso equivalent.

According to reports, the university was the target of a cyberattack that interrupted computer systems and applications, potentially exposing 1.4 million patients’ data.

This compromised entity is a public academic health institution in the Texas Tech University System. It teaches and develops healthcare professionals, performs medical research, and provides patient care.

 

The alleged Interlock ransomware attack was discovered in September.

 

This Interlock ransomware operation reportedly occurred in September 2024 and involved losing critical information. Moreover, the initial disclosure revealed that the campaign had caused a brief disruption to several computer systems and apps.

Immediately after detecting these flaws, the HSCs executed preventive measures to protect the network’s security and launched an inquiry. However, the investigation confirmed that a cybersecurity event caused technical concerns, which resulted in access to or removal of specific data and folders from the HSCs’ network.

In addition, in a filing with the US, the Texas Tech University Health Sciences Center disclosed that the breach exposed the total data of 1,465,000 people.

As of now, some of the confirmed information that the attackers may have breached vary by individual. Still, essential information, like full name, date of birth, physical address, social security number, and driver’s licence number, is highly likely to be included in the breached information.

On the other hand, critical data, such as government identification numbers, financial account information, health insurance information, medical information, billing and claims data, and diagnosis and treatment information, may vary for each individual.

The organisation will notify those confirmed to have been impacted and offer free credit monitoring services.

Potentially impacted individuals should remain vigilant against potential phishing and social engineering attacks, monitor their credit reports and health insurance billing statements, and report any suspicious activity to the authorities.

This issue is a developing story, but the threat actors have already exposed 2.1 million files totalling 2.6 TB of alleged stolen HSC data. This exposed database is now available for download from their dark web extortion platform.