CHINESE HACKERS BREACH REDCAP, STEAL MEDICAL DATA

The espionage campaign targeted unpatched vulnerabilities in REDCap, a widely-used platform for managing clinical research data. Attackers deployed the InfiniteRed malware to maintain persistent access and exfiltrate confidential information. REDCap servers are popular across hospitals and research facilities for managing patient data and clinical trials. The breach underscores ongoing risks faced by healthcare institutions, particularly those with inadequate patch management protocols. Security researchers attribute the campaign to state-sponsored actors based in China. The incident highlights how exposed medical infrastructure remains a target for foreign intelligence operations seeking proprietary research, clinical trial data, and institutional information. No timeline for discovery or containment was disclosed. Healthcare organizations using REDCap are advised to audit access logs, apply security patches, and review data access controls.