Exclusive-Star Health hacker says they sent death threats, bullets to India executives
By Munsif Vengattil, Praveen Paramasivam and Aditya Kalra
NEW DELHI (Reuters) -The hacker who leaked sensitive personal data held by Indian health insurer Star Health last year has taken responsibility for sending death threats and bullets to the company's chief executive and finance head.
The hacker, who goes by the alias "xenZen", described their reprisals against Star Health and Allied Insurance Company in a March 31 email to Reuters. The news agency is reporting them for the first time.
Star Health, India's biggest health insurer, has faced criticism from customers and data security experts since Reuters reported last September that xenZen had leaked sensitive client data, including medical reports. At the time, xenZen told Reuters in an email they possessed 7.24 terabytes of data related to over 31 million Star Health customers and was speaking to potential buyers for the data.
The news agency hasn't independently confirmed the identity or location of xenZen, the accuracy of the facts laid out in the March 31 email or the hacker's motive for targeting Star Health and its executives, which the email ascribed to the company's denial of medical claims to certain customers.
In response to questions from Reuters, Star Health's chief legal officer said in a statement the company could not comment "due to an ongoing, highly sensitive criminal investigation" related to its data leak.
XenZen said they had concealed bullet cartridges in two packages sent to Star Health's head office in the southern Indian city of Chennai, in Tamil Nadu state, in February.
The email included photographs that showed the packages addressed to Chief Executive Anand Roy and Chief Financial Officer Nilesh Kambli and a note inside which read: "next one will go in ur and ur peoples head. tik tik tik."
Roy did not respond to a phone call requesting comment, while Kambli told Reuters Star Health's public relations team would respond on his behalf. The company did not respond to further requests for comment.
The New Indian Express on Saturday reported that police in Tamil Nadu were investigating the threats and had linked them to xenZen.
Tamil Nadu police did not respond to Reuters queries.
Three Indian police sources confirmed an investigation was underway. They declined to be named as the matter is confidential.
One police source said a man from the neighbouring state of Telangana, who the source did not name, has been arrested in recent days for allegedly helping courier the packages to Star Health on behalf of xenZen.
Reuters was unable to identify the individual or the status of his detention.
Globally, health care companies have been reassessing the risks for their top executives after UnitedHealthcare Chief Executive Brian Thompson was murdered in a targeted attack in December. The killing also called fresh attention to deepening patient anger over health insurance.
In the March 31 email to Reuters, xenZen referred to the killing of Thompson and said the death threats to the Star Health executives were sent after the hacker was contacted for help by customers of Star Health who had been denied claims on medical bills despite coverage plans with the company.
Star Health did not comment on what xenZen described as their motive, the claims of dissatisfied customers being denied or the police investigation into the threats.
Star Health launched internal investigations into last year's data leak, which the company said followed a ransom demand of $68,000 from the hacker.
Star Health last September sued xenZen and messaging app Telegram for hosting the sensitive customer data on its chatbots, court papers show. The chatbots hosting the stolen data have since been deleted and the case is ongoing.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
40 minutes ago
- Yahoo
Australia's Monash IVF reports second embryo incident in two months
(Reuters) -Australian fertility group Monash IVF on Tuesday reported a new incident related to an embryo transfer, within a couple of months after reporting a similar case where a doctor accidentally implanted the wrong embryo. The latest incident, which occurred on June 5 at the company's Clayton laboratory, has been reported to regulatory bodies and the company's insurer, Monash said, issuing an apology to the impacted couple. The company is also conducting an internal investigation. The firm added that it is implementing additional verification processes and patient confirmation safeguards to prevent similar incidents in the future. The clinic owner in April reported a similar incident where an Australian woman gave birth to a stranger's baby due to a Monash fertility doctor's error. Shares of Monash are down about 31% since the news. The mix-up has drawn attention to an industry that was largely self-regulated until recently and raised concerns about security protocols at IVF clinics. The facilities are regulated by a mix of Australian industry bodies and state government agencies.
Yahoo
an hour ago
- Yahoo
Russia's new drone strikes hit Kyiv, maternity ward in Odesa, Ukraine says
By Pavel Polityuk KYIV (Reuters) -Russia launched another large drone attack on Ukraine, striking Kyiv and damaging a maternity ward in the southern port of Odesa, regional officials said early on Tuesday. The overnight attacks follow Russia's biggest drone strike on Ukraine on Monday - part of intensified operations that Moscow said were retaliatory measures for Kyiv's recent brazen attacks inside Russia. Medics were called to four districts of Kyiv a couple hours after midnight on Tuesday, including the historic Podil neighbourhood, Mayor Vitali Klitschko said on the Telegram messaging app. The military said the strikes were still ongoing and urged people to seek bomb shelters. The full scale of the attack was not immediately clear. "Enemy drones are simultaneously attacking several districts of the city," Timur Tkachenko, head of Kyiv's military administration said on the Telegram messaging app. "There is damage to residential buildings and fires. Rescuers are working at the sites." Reuters' witnesses heard a series of loud explosions throughout the city. In the southern port of Odesa, a "massive" drone attack targeted an emergency medical building and a maternity ward, as well as residential buildings, Oleh Kiper, governor of the broader Odesa region said on Telegram. Regarding the maternity hospital there were no casualties and patients and staff were evacuated, Kiper said. He posted photos of broken windows in what looked like a medical facility and of damages to facades of several buildings. Both sides deny targeting civilians in the war that Russia launched against Ukraine more than three years ago. But thousands of civilians have been killed in the conflict, the chief majority of them Ukrainian.
Yahoo
an hour ago
- Yahoo
Cleanup of graffiti, damage begins in Los Angeles as anti-ICE protests continue
By Christian Martinez (Reuters) -Even as protests against raids by U.S. Immigration and Customs Enforcement stretched into a fourth day Monday in Los Angeles, city workers began a cleanup of graffiti and other weekend damage across the city. Maintenance workers could be seen removing anti-ICE graffiti spray painted on City Hall as other workers covered up messages in the city's Arts District. Burned out shells of Waymo autonomous vehicles remained on the city street where they had been engulfed in flames a day earlier. Spray painted messages with expletives aimed at ICE and anti-police, and pro-migrant statements could be seen across downtown Los Angeles, including at the Roybal Federal Building where protesters continued to gather on Monday afternoon. The cleanup efforts come after protesters clashed with the Los Angeles Police Department, other law enforcement personnel and ICE agents amid ongoing immigration sweeps in Southern California. The protests reached a boiling point on Sunday as multiple vehicles, including a California Highway Patrol cruiser, were set on fire. Police fired tear gas into the crowds. Los Angeles television station KTLA reported several businesses in the downtown area, including a cell phone retailer and a clothing store, were looted and vandalized overnight and in the early morning hours. Los Angeles Public Library said it would close its branches in downtown, Chinatown and Little Tokyo due to the protests. "We're closing to ensure the safety of patrons and staff in DTLA," the library said on Monday in a post on X.
