auruminstitute.org listed by the lockbit3 ransomware group

Overview

LockBit 3.0 listed The Aurum Institute, a South African healthcare and research organisation, on its leak site on 13 February 2024. The group claimed to have accessed a wide range of sensitive data.

What was published

The group stated it obtained personal information, financial documents, research material and patient health data, including results of experiments.

Risks for affected individuals

Patient health data is highly sensitive. Exposure can lead to discrimination, targeted fraud and privacy harm, while research data loss threatens ongoing studies and institutional trust.

What remains unknown

The number of individuals affected and whether the data was published, sold or withheld are not disclosed.

What affected people should do

Affected patients should watch for phishing referencing the institute and report identity misuse. The institute should follow South African data protection obligations and inform impacted individuals.