 |
|
Star Health and Allied Insurance Co. Ltd. has been the victim of a targeted cyberattack resulting in unauthorized and illegal access to certain data. While the company acknowledges the breach, it asserts that its operations remain unaffected and services continue without interruption. The company has initiated a comprehensive forensic investigation led by independent cybersecurity experts, working closely with government and regulatory authorities to address the incident. This includes reporting the event to insurance and cybersecurity regulatory bodies and filing a criminal complaint.
The company's actions extend beyond internal investigations. They have sought legal recourse, approaching the Madras High Court to disable access to the relevant information, including that held by third parties. The High Court has issued an order directing compliance with this request, which Star Health is diligently pursuing. Further, the company has emphasized the illegality of unauthorized acquisition, possession, or dissemination of customer data, urging platforms, hosting companies, social media channels, and users to halt such activities and adhere to the High Court's directives.
This incident follows a previous data leak reported by Reuters, where Star Health Insurance's customer data, including medical reports, was publicly accessible through chatbots on Telegram. This leak occurred just weeks after the Telegram founder faced accusations of facilitating criminal activity through the messaging app. The company's Chief Information Security Officer (CISO), Amarjeet Khanuja, is cooperating with the investigation. To date, no evidence has been found indicating any wrongdoing on his part.
The cyberattack on Star Health Insurance highlights the increasing vulnerability of businesses to these threats. The consequences of such incidents can be significant, including reputational damage, financial losses, and legal ramifications. The company's proactive response, involving collaboration with authorities, legal action, and emphasis on data protection, sets an example for other organizations facing similar challenges. The investigation is ongoing, and further updates are expected as the situation unfolds.
Source: Star Health Insurance under cyberattack, says operations unaffected even after data leak