Macabre stories of a hacker in the public health sector (Chile)
summary
Nationwide public health network covering ~14 million patients exposes insecure shares and backups; scanning finds ~150,000 devices and over 3 million files including 23,000 blood donor forms and 1,500 mammographies plus HIV and abortion records. Attack vector includes reversing a .NET binary to recover a key, shell scripts that harvest filenames, and slow bulk copying of data. Press disclosure forces a patchy firewall block, CTO gets a token fine, legal fight ends with a Supreme Court $25,000 award.
AI-written summary · about
chapters (11)
- 0:00Context and background
- 2:22Professional background
- 5:02Security vulnerabilities
- 10:47Insecure network practices
- 12:51Data leak discovery
- 18:54Cooperating with the press
- 20:56Technical details of the leak
- 22:53Impact of the leaked data
- 26:33Consequences and response
- 29:08Termination and legal battle
- 32:45Systemic failures and future
related talks
58mMedical Device Security
40mPublic Health Cyber War Games: How Hackers are Exploiting Healthcare
37mMillions of Patient Records at Risk: The Perils of Legacy Protocols
43mSecurity in FHIR
58mBreaking Bad: Stealing Patient Data Through Medical Devices
28mFrom a Hospital into the Realm of Hades
46mKeynote: Lessons From 11 Billion Breached Records
40mThe Attack Surface of the Healthcare Industry