Exclusive-Star Health hacker says they sent death threats, bullets to India executives
By Munsif Vengattil, Praveen Paramasivam and Aditya Kalra
NEW DELHI (Reuters) -The hacker who leaked sensitive personal data held by Indian health insurer Star Health last year has taken responsibility for sending death threats and bullets to the company's chief executive and finance head.
The hacker, who goes by the alias "xenZen", described their reprisals against Star Health and Allied Insurance Company in a March 31 email to Reuters. The news agency is reporting them for the first time.
Star Health, India's biggest health insurer, has faced criticism from customers and data security experts since Reuters reported last September that xenZen had leaked sensitive client data, including medical reports. At the time, xenZen told Reuters in an email they possessed 7.24 terabytes of data related to over 31 million Star Health customers and was speaking to potential buyers for the data.
The news agency hasn't independently confirmed the identity or location of xenZen, the accuracy of the facts laid out in the March 31 email or the hacker's motive for targeting Star Health and its executives, which the email ascribed to the company's denial of medical claims to certain customers.
In response to questions from Reuters, Star Health's chief legal officer said in a statement the company could not comment "due to an ongoing, highly sensitive criminal investigation" related to its data leak.
XenZen said they had concealed bullet cartridges in two packages sent to Star Health's head office in the southern Indian city of Chennai, in Tamil Nadu state, in February.
The email included photographs that showed the packages addressed to Chief Executive Anand Roy and Chief Financial Officer Nilesh Kambli and a note inside which read: "next one will go in ur and ur peoples head. tik tik tik."
Roy did not respond to a phone call requesting comment, while Kambli told Reuters Star Health's public relations team would respond on his behalf. The company did not respond to further requests for comment.
The New Indian Express on Saturday reported that police in Tamil Nadu were investigating the threats and had linked them to xenZen.
Tamil Nadu police did not respond to Reuters queries.
Three Indian police sources confirmed an investigation was underway. They declined to be named as the matter is confidential.
One police source said a man from the neighbouring state of Telangana, who the source did not name, has been arrested in recent days for allegedly helping courier the packages to Star Health on behalf of xenZen.
Reuters was unable to identify the individual or the status of his detention.
Globally, health care companies have been reassessing the risks for their top executives after UnitedHealthcare Chief Executive Brian Thompson was murdered in a targeted attack in December. The killing also called fresh attention to deepening patient anger over health insurance.
In the March 31 email to Reuters, xenZen referred to the killing of Thompson and said the death threats to the Star Health executives were sent after the hacker was contacted for help by customers of Star Health who had been denied claims on medical bills despite coverage plans with the company.
Star Health did not comment on what xenZen described as their motive, the claims of dissatisfied customers being denied or the police investigation into the threats.
Star Health launched internal investigations into last year's data leak, which the company said followed a ransom demand of $68,000 from the hacker.
Star Health last September sued xenZen and messaging app Telegram for hosting the sensitive customer data on its chatbots, court papers show. The chatbots hosting the stolen data have since been deleted and the case is ongoing.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
44 minutes ago
- Yahoo
Australian regulator cracks down on 'finfluencers' over unlawful financial advice
(Reuters) -Australia's corporate regulator said on Thursday it had issued warnings to a number of social media "finfluencers", accusing them of offering misleading financial advice and promoting high-risk investment products to their followers. The Australian Securities and Investments Commission warned that the accounts often provided deceptive information and flagged it had sent notices to 18 social media "finfluencers" who were not licensed to provide financial advice. The action was taken as part of the Global Week of Action Against Unlawful Finfluencers held last week, which saw regulators from around the world using regulatory and enforcement powers against unlawful financial influencers. Measures against such illegal activity included arrests, warning notices, website takedowns, and alerts to consumers of the risks of unauthorised and misleading finfluencer content. ASIC said it is concerned that consumers could be harmed by finfluencers providing unauthorised financial product advice and promoting high-risk, complex investment products, such as contracts for difference (CFDs) and over the counter (OTC) derivative products. If a finfluencer is not licenced, an authorised representative or exempt, they are legally not permitted to carry on a business of providing investment business in Australia, the regulator said. ASIC along with market regulators from the UK, United Arab Emirates, Italy, Hong Kong and Canada took coordinated actions against such unauthorised finfluencers. Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
Yahoo
an hour ago
- Yahoo
Taiwan cyber unit says it will not be intimidated by China bounty offer
TAIPEI (Reuters) -Taiwan's cyber forces will not be intimidated by China's threats of a bounty for the arrest of 20 people Beijing says are Taiwanese military hackers, and China's legal system has no jurisdiction on the island, its defence ministry said. China views democratically-governed Taiwan as its own territory and has over the past five years increased its military and political pressure against the island. Taiwan's government rejects Beijing's sovereignty claims. Last week, the public security bureau in the Chinese city of Guangzhou said the hackers were part of the Taiwan military's Information, Communications and Electronic Force Command, and published their pictures, names and Taiwan identity card numbers, offering rewards of more than $1,000 for their arrest. On Wednesday, China's Taiwan Affairs Office said the government will "pursue the matter to the end, and will not be lenient", using legal channels to "crack down" on their activities. Late Wednesday, Taiwan's defence ministry's electronic force command said China was continuing to use "fictitious cyber hacking incidents to distort the facts" and offering cross-border rewards. According to Taiwan's constitution, China's communist party has no legal jurisdiction over the island and its laws have "no real binding force" on Taiwan's people, it said in a statement. "The Chinese communists have invoked their domestic laws and regulations to systematically manipulate public opinion, with the intention of creating long arm jurisdiction and undermining the morale of our military," it added. "The officers and soldiers of the Information, Communications and Electronic Force Command will not be affected by this, and will continue to defend the digital frontier and ensure national security through the solid defence of information." Taiwan has repeatedly accused China of staging not only widespread hacking attacks against it, but also of spreading fake news via social media and other means to undermine confidence in the government.
Yahoo
2 hours ago
- Yahoo
Lawyers for man mistakenly deported from US say he should be freed while DOJ pursues new charges
By Dietrich Knauth and Luc Cohen (Reuters) -Lawyers for Kilmar Abrego Garcia, who was mistakenly deported to El Salvador in March and returned on Friday, said their client should be set free while the U.S. Department of Justice pursues new criminal charges against him. The U.S. Department of Justice on Friday had asked a federal judge in Tennessee to detain Abrego Garcia while he is prosecuted on newly-filed charges of transporting illegal immigrants within the United States. The motion filed on Wednesday said Abrego Garcia had already been imprisoned without due process and he posed no danger to the community and no flight risk. 'Mr. Abrego Garcia asks the Court for what he has been denied the past several months – due process,' Abrego Garcia's attorneys wrote in Wednesday's court filing. 'Mr. Abrego Garcia must be released.' Abrego Garcia on March 15 was deported to El Salvador, despite a 2019 immigration court ruling that he should not be sent there because he could be persecuted by gangs, and the incident has become a flashpoint for Republican President Donald Trump's aggressive immigration policies. The Trump administration has said Abrego Garcia was a member of the MS-13 gang, an accusation his lawyers deny. Trump administration officials have accused the judiciary of interfering with the executive branch's ability to conduct foreign policy, and they portrayed Abrego Garcia's criminal indictment as vindication for their approach to deportations. A grand jury in Nashville, Tennessee, on May 21 indicted him on charges of transporting undocumented migrants from the U.S.-Mexico border to locations around the country. Abrego Garcia remains detained pending his next court hearing on Friday. His lawyer Simon Sandoval-Moshenberg has called the criminal charges "fantastical" and a "kitchen sink" of allegations.
