BYOD Ransomware Gang claims to have stolen Medical Records of Two Million Texas Residents - Cybersecurity Insiders
The BYOD ransomware group has allegedly breached Texas Health and Human Services Commission systems, claiming theft of sensitive personal and medical information from approximately two million Texas residents.
The cybercriminal group reportedly made the announcement through its official social media channels, raising concerns about healthcare database security and citizen privacy. BYOD has recently been linked to attacks on Vanderbilt University and claims surrounding the Trump Mobile data breach.
Texas HHSC has acknowledged its systems were compromised but is still investigating. The agency has not yet confirmed the exact number of affected individuals or the full extent of potentially exposed information.
Double extortion approach
BYOD is reportedly employing a double-extortion tactic, allegedly obtaining Medicaid records, SNAP records, TANF records, disaster assistance information, and banking details. Such exposure could create serious risks including identity theft and financial fraud.
If verified, the exposure of such information could create serious risks, including identity theft, financial fraud, and potential misuse of sensitive medical records.
Unverified claims
The ransomware group has not released publicly verifiable evidence of the data theft. Reports suggest BYOD has given Texas HHSC a 10-day deadline and is demanding approximately $13 million in exchange for a decryption key and permanent deletion of stolen information.
The incident underscores growing cybersecurity challenges for public healthcare institutions, which must strengthen security infrastructure and implement effective monitoring to prevent major breaches.
Related
