Healthcare Provider Pays $65 Million After Nude Photos of Cancer Patients Leaked
A U.S. healthcare provider, Lehigh Valley Health Network (LVHN), has agreed to pay $65 million to victims after a Russia-linked hacker group, ALPHV
prativad 
A U.S. healthcare provider, Lehigh Valley Health Network (LVHN), has agreed to pay $65 million to victims after a Russia-linked hacker group, ALPHV, leaked nude images of its cancer patients.
The incident occurred in early 2023 when ALPHV breached LVHN's systems and stole sensitive data of 135,000 patients. Among the leaked information were nude photos of at least 600 patients, many of whom were undergoing cancer treatment.
The leaked images were published on the dark web, causing significant distress to the victims. LVHN faced a class-action lawsuit and ultimately decided to settle.
The settlement, which is expected to be finalized in November, will provide payments ranging from $50 to $70,000 to affected patients. Victims whose nude photos were leaked will receive the maximum payment.
While LVHN refused to pay a ransom demanded by the hackers, the lawsuit indirectly blamed the company for not doing so, arguing that this decision led to the release of the sensitive images.
The incident highlights the risks associated with storing highly sensitive patient data, especially when it includes identifiable information and private images. It also serves as a reminder of the ongoing threat posed by ransomware attacks and the importance of robust cybersecurity measures.
