Ransomware report has two ransoms and no confirmation
A report links Hyderabad healthcare company CR Healthcare Services to an alleged attack. Public records confirm the company exists; they do not confirm the breach, data exposure or police investigation.
Public records confirm the company’s existence; the reported cyberattack remains unconfirmed.
A Hyderabad healthcare company has reportedly been hit by ransomware. The evidence currently available is one published report — not a police record, company statement or technical incident notice. The paperwork, meanwhile, confirms only that CR Healthcare Services Private Limited exists in Telangana.
The report, published on October 1, says the suspected incident occurred on September 29 and allegedly involved encrypted patient information, including names, photographs, phone numbers, dates of birth, addresses, diagnostic reports, FHIR clinical records and audit reports. It also reports a ransom demand of about Rs 8.5 crore, while separately mentioning a demand for $100,000 within 72 hours. It does not explain whether these were separate demands or one figure got lost on the way to publication.
The report says a complaint was lodged with Cyberabad Cybercrime police. It gives no FIR number, police statement, investigating officer or quoted company response. The accessible corporate records and the company’s MedUnited website establish the entity and its Hyderabad presence, but say nothing about an attack. No patient count, payment status, service disruption, published data or ransomware group has been independently confirmed. Telangana has enough cybersecurity questions already; this one still needs its evidence to arrive.