
A hacker using the "xenZen" alias has taken responsibility for sending death threats and bullets to the Indian health insurer Star Health and Allied Insurance Co. Chief Executive Anand Roy and Chief Financial Officer Nilesh Kambli.Â
Last year, Star Health faced a significant data breach that exposed sensitive information of over 31 million customers. The hacker, xenZen, who has previously leaked this data, now claims to have targeted the leadership due to alleged grievances of customers who were denied medical claims.Â
According to an email sent to Reuters on March 31, xenZen acted after being approached by dissatisfied customers. The threats were reportedly made in February, with packages sent to Star Health's Chennai office containing bullet cartridges and a threatening note.Â
Tamil Nadu police have launched an investigation, and one individual from the neighboring Telangana state has been arrested in connection with couriering the packages.
This latest incident follows Star Health's previous legal action against xenZen and messaging app Telegram for hosting sensitive data via chatbots. While the chatbots have since been removed, the ongoing criminal investigation limits the company from providing further comments.
This alarming case highlights the vulnerability of healthcare institutions to cyberattacks and the potential for escalation into physical threats.Â
The healthcare industry globally continues to reassess its security measures after high-profile incidents, such as the murder of UnitedHealthcare CEO Brian Thompson in 2024, which was also linked to deepening tensions over insurance disputes.