Former infosec COO pleads guilty to attacking hospitals to drum up business

Former infosec COO pleads guilty to attacking hospitals to drum up business

November 20, 2023 at 12:23PM

The former COO of an Atlanta tech company has pleaded guilty to launching online attacks on two hospitals in 2018. Vikas Singla admitted to rendering the phone system of Gwinnett Medical Center inoperable and stealing patient data. He also publicized the attacks on Twitter and cited them in sales pitches. Singla faces a maximum prison term of 10 years, but due to his health conditions, he may receive 57 months of house detention. He must also pay restitution to the hospital and insurance company.

Key Takeaways:

– Vikas Singla, a former COO at a network security vendor, pleaded guilty to intentionally launching online attacks on two hospitals in Atlanta in 2018.
– The attacks rendered the Ascom phone system at Gwinnett Medical Center inoperable, affecting communication between doctors and nurses.
– Singla also gained access to the hospital’s VPN and stole personal data of over 300 patients from a device connected to mammogram machines.
– He printed the stolen data on over 200 printers across both hospitals’ campuses, causing fear among medical staff and potentially impairing hospital services.
– Singla publicized the incident on social media, posting stolen personal information from the mammogram’s digitizer.
– Following the attacks, the network security vendor emailed potential clients about new business opportunities, citing the incidents.
– Singla faces a maximum prison term of 10 years but may receive 57 months of house detention due to his rare and incurable form of cancer.
– He is required to pay $817,804.12 in restitution to the affected hospital and insurance company for the damages.
– The court will sentence Singla on February 15, 2024.
– Securolytics and Northside Hospital (formerly Gwinnett Medical Center) have not commented on the situation.

Full Article