Key Judgements
- With medium confidence, ransomware activity affected LotusCare system availability.
- With low to medium confidence, unauthorised data access may have occurred.
- With low confidence, specific numerical claims circulating publicly are accurate.
Implications
- Public statements should avoid confirmation of exfiltration.
- Further clarification of data categories is required.
- Ongoing monitoring of extortion communications is recommended.