BARTS HEALTH NHS CONFIRMS CL0P RANSOMWARE BEHIND DATA BREACH

Summary from the TLDR InfoSec newsletter

Barts Health NHS Trust confirmed that the Cl0p ransomware group exfiltrated 241 GB of data from invoice databases after exploiting a vulnerability in Oracle E-Business Suite. The breach occurred in August but remained undetected until data surfaced on leak sites in November. Stolen data included patient billing information, former staff salary records, and supplier payment details. Clinical systems remained unaffected. Oracle has since patched the exploited flaw. The incident highlights the continued targeting of healthcare organizations through enterprise software vulnerabilities.