The breach was originally reported on WikiLeaks, a site that publishes and comments on reports of leaked documents. According to the site, when people logged on to the Web site of the Virginia Prescription Monitoring Program on April 30, they saw a ransom note containing the following information:
"I have your s@*t! In *my* possession, right now, are 8,257,378 patient records and a total of 35,548,087 prescriptions. Also, I made an encrypted backup and deleted the original. Unfortunately for Virginia, their backups seem to have gone missing, too. Uhoh :(
"For $10 million, I will gladly send along the password. You have 7 days to decide. If by the end of 7 days, you decide not to pony up, I'll go ahead and put this baby out on the market and accept the highest bid."
The note's author threatened to sell the information to the highest bidder if the money isn't turned over.
Thursday was the purported deadline for the ransom.
Virginia Gov. Tim Kaine Infuriated
The Virginia Prescription Monitoring Program Web site, which pharmacists use to track drug prescriptions to monitor narcotics abuse, is currently offline while authorities investigate the problem, the Daily Mail reported Thursday.ABC 7 News also reported Thursday that Virginia Gov. Tim Kaine told The Associated Press that he was infuriated by the acts and that the state won't make the payments.
Health officials called the FBI after viewing the ransom demand on the Web site last week.
If more than 8 million patient records are up for grabs, this could be a spectacularly huge problem for most of Virginia's residents. According to the U.S. Census Bureau, Virginia was home to 7.8 million people in 2008.
Sandra Whitley Ryals, director of the Virginia Department of Health Professions, told the Daily Mail that her department is satisfied that all the data was properly backed up.
