The BYOD ransomware group has allegedly breached the systems of the Texas Health and Human Services Commission(HHSC), claiming to have stolen sensitive personal and medical information belonging to approximately two million Texas residents. The cybercriminal group reportedly made the announcement through its official social media channels, raising concerns about the security of healthcare databases and the privacy of millions of citizens.
BYOD, which recently attracted attention following its alleged involvement in a data breach targeting Vanderbilt University, is increasingly making headlines for attacks involving sensitive personal, healthcare, and financial information. The group has also been linked to claims surrounding the Trump Mobile data breach, further highlighting its growing presence in the cybercrime landscape.
According to reports, Texas HHSC has acknowledged that its systems were compromised by the ransomware group. However, the agency is still investigating the incident and has not yet established the exact number of individuals affected or confirmed the full extent of the information potentially exposed.
Ransomware attacks typically involve cybercriminals infiltrating an organization’s
Ransomware attacks typically involve cybercriminals infiltrating an organization’s network, extracting confidential information, and encrypting critical files to disrupt normal operations. Attackers then demand payment in exchange for restoring access to affected systems. In many cases, they also threaten to publish stolen information if victims refuse to meet their demands.
BYOD Ransomware group is reportedly employing this double-extortion approach in the Texas HHSC incident. According to claims shared with Cybernews, the attackers allegedly obtained Medicaid records, Supplemental Nutrition Assistance Program (SNAP) records, Temporary Assistance for Needy Families (TANF) records, disaster assistance information, and banking details associated with affected individuals. If verified, the exposure of such information could create serious risks, including identity theft, financial fraud, and potential misuse of sensitive medical records.
However, the ransomware group has not yet released screenshots or other publicly verifiable evidence demonstrating the extent of the alleged data theft. Consequently, the claims regarding the number of affected individuals and the specific categories of compromised information should be treated with caution until independently confirmed by the authorities.
Reports circulating on a Telegram channel suggest
Meanwhile, reports circulating on a Telegram channel suggest that BYOD has given the affected organization a 10-day deadline and is demanding approximately $13 million. The group allegedly promises to provide a decryption key and permanently delete the stolen information from its servers in exchange for payment.
The incident underscores the growing cybersecurity challenges facing public healthcare institutions and government agencies. Organizations handling sensitive citizen information must strengthen their security infrastructure, implement effective backup strategies, and continuously monitor their networks to identify suspicious activities before they escalate into major breaches.
