Hacker accesses thousands of cosmetic surgery’s data records

A hacker, who has yet to be named, has accessed and exfiltrated hundreds of thousands of data records on prospective  cosmetic surgery clients.

Surrey’s Harley Medical Group, with 21 surgeries throughout the country, revealed that details have been compromised on close to 480,000 individuals.

Each potential client had completed an online enquiry form expressing interest in receiving treatment, enclosing details such as name, contact details, birth date, and address. The group has claimed, however, that the hacker was unable to access any confidential financial and clinical records.

While it is unclear how the hacker managed to access the data, it appears that the motive was a financial one. Although Harley didn’t provide specific details due to an ongoing investigation, a spokesperson agreed that financial settlement was clearly the agenda.

Peter Boddy, who is the group’s chairman, has apologised in writing to everyone who has had their data breached. He said in the letter:

“We recently became aware that an unknown individual had deliberately bypassed our website security, gaining access to information from initial website enquiries in an attempt to extort money from the company.”

The breach of an individual’s data can be extremely harmful for a company, as it can destroy trust and reputation with both current and prospective clients. The best way to prevent such occurrences is to open and fill information security vacancies, so that any data can be kept more secure and attempts to access data can be recognised early. Harley may be tempted to make such a move.