[johnsmith1924]

Some screenshots of RAT's RDP seeing what they're doing.

- They discovered that there're some unusual RDPs, so, they call the IT staff (gpanaIT) to see windows logon event



- Use hmsuser (a super domain) doing his health admin job everyday

--> The softwares (infoworld (https://www.infoworld.com/ ???) ...) used for health system in romania are old as expected. I think they have internet connections with other government entities in romania, but did not check

great job bro !!!

[buchara]

interesting
i will ask my boss about this

[buchara]

tell me the price ?

[ddkdkdk343555]

tell me the price ?

send me pm please

[buchara]

tell me the price ?

send me pm please

check ur inbox

[greatesheva]

sample lab test of a patient

do u have many data like this ?

[ddkdkdk343555]

sample lab test of a patient

do u have many data like this ?

yes, all of their data

[ddkdkdk343555]

Their main website: https://medcenter.ro/

- From https://www.linkedin.com/company/medcenter
MEDCENTER is one of the top five suppliers of private medical services in Romania, both clinical and laboratory.
At a glance:
  o Started in 1998
  o Owns a network of over 40 medical centers, laboratories, blood-collection locations
  o Around 6.000.000 laboratory tests yearly
  o Around 50.000 patients yearly
  o Around 40.000 medical subscriptions sold
  o Over 500 private companies as customers
  o Quality Management System certified according to SR EN ISO 9001:2015 standard
  o Medcenter Laboratories are RENAR accredited, according to SR EN ISO 15189:2013 standard

Industry: Hospitals and Health Care
Company size: 201-500 employees
Headquarters: București, România
Type: Privately Held

-
I've successfully hacked their Active Directory environment, obtained the domain administrator role, access the Network Attached Storage (encrypted & removed all backups), access the database servers, app servers (encrypted & removed them all).

-
The content of the data is sql databases (mostly patients' data, patients' health history record), documents of patients' data & backup of important virtual machines



-
Main website with the message telling they're under maintenance because of the hack





-
contact email for buying: [email protected]

UPDATE:
- Due to being reported by some competior, the proton team has disabled my email. For contacting using new email [email protected] address or Tox ID: C636F5DC7242CD9D11C1702D9323F7B8D186FC0787626DF6F9F01F60DA6B4B7DC4029BA26671