Harley Medical Group

Summary

A UK-based cosmetic surgery provider experienced a cybersecurity breach where hackers accessed personal details of approximately 500,000 individuals who submitted initial inquiries through its website. The compromised data included phone numbers, email addresses, and dates of birth, though clinical and financial records remained secure. The attackers, reportedly Russian-linked, bypassed website security in an extortion attempt against the organization. The company acknowledged the incident, apologized to affected clients, and implemented enhanced security measures following the breach.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

In March 2014, Harley Medical Group, a prominent UK cosmetic surgery provider with 31 clinics, suffered a cybersecurity breach where hackers illegally accessed personal details of approximately 500,000 individuals who had submitted initial inquiries through the company's website. The attackers bypassed website security measures to steal data including phone numbers, email addresses, and dates of birth from online forms completed by prospective patients seeking consultations for procedures such as breast augmentations, facelifts, and tummy tucks. The breach was identified by the company's leadership, with Chairman Peter Boddy confirming that clinical records and financial information remained uncompromised. The intrusion constituted an extortion attempt, as the perpetrators contacted Harley Medical Group using a Russian email address to demand payment. The company's Thames Ditton headquarters initiated incident response by notifying affected individuals through direct correspondence, with Boddy's apology letter emphasizing that core medical and payment systems were not penetrated.

The attack specifically targeted non-clinical inquiry records accumulated through Harley Medical Group's patient acquisition channels. Media reports attributed the breach to Russian hackers, though the company did not publicly confirm this attribution. Among the compromised records were details of celebrities from the television series *The Only Way Is Essex*, amplifying public attention. Harley Medical Group implemented enhanced security protocols following the breach and communicated updates via Twitter, assuring customers that critical medical and financial data remained secure. The incident exposed vulnerabilities in the company's front-end web systems while demonstrating that backend clinical databases were segregated from marketing inquiry platforms. No evidence suggested misuse of stolen personal data beyond the extortion attempt against the corporate entity. Operational continuity was maintained across all clinics throughout the incident response period.

Sources

Sources available to members: 1 source.