2023 Siemens Healthineers (Varian segment) — LockBit leak-site publication; taskforce investigation (Aug)
Data compromised
Unspecified corporate and possibly clinical-adjacent files per gang marketing—no consolidated public victim count
Technical writeup
The LockBit ransomware group listed Varian, the radiation-oncology subsidiary Siemens Healthineers acquired in 2021, on its public leak site with threats to publish oncology-related datasets. Recorded Future News (*The Record*) quoted a Siemens Healthineers spokesperson acknowledging data had appeared on LockBit’s site framed as Varian-segment material while an incident-response taskforce worked the matter. SecurityAffairs and health-sector outlets summarized gang claims of database exfiltration that Varian had not independently confirmed at disclosure time. Treat headlines about patient record volumes as partially actor-sourced pending any future victim-specific regulatory totals.
Root cause
Ransomware/extortion operator claims and leak-site publication against a health-tech subsidiary (intrusion mechanics publicly underspecified)