University of Hawaii Engaged With Hackers Who Highjacked Cancer Study Data
TL;DR
University of Hawaii delayed notifying cancer study participants after hackers stole their Social Security numbers and personal data in August. UH reported the ransomware attack to the Legislature in December, possibly violating state law, and has withheld key details about the breach and any payments to hackers.
Source: Honolulu Civil Beat
Social Security numbers and personal information from participants in a University of Hawaiʻi Cancer Center study were exposed to hackers in August but four months later UH had yet to notify those affected that their data was stolen. UH outlined the ransomware attack in a report to the Legislature in December, which appears to be later than required by state law. UH officials declined an interview request and have refused to provide key information, including which cancer research project had been affected, how many participants’ SSNs were exposed and whether — or how much — UH paid the hackers to regain access to the data. UH is a public university system with three main universities (Mānoa, Hilo, West Oʻahu) and seven community colleges. Full Story