BreachPublished 15 Jun 2026

Chinese hackers breach REDCap servers, steal medical research

Source Bleeping Computer

Description

A China-linked espionage campaign targeted exposed REDCap servers, deploying the InfiniteRed malware to steal sensitive medical research data from a North American institution. The attack involved breaching vulnerable REDCap servers to gain unauthorized access and exfiltrate confidential information. No specific affected software versions or patches are identified. There is no indication of known exploits in the wild beyond this campaign. The threat is assessed as medium severity based on the sensitive nature of the stolen data and the targeted espionage activity.

Impact

Sensitive medical research data was stolen from a North American institution due to unauthorized access via compromised REDCap servers. The breach potentially compromises confidentiality and intellectual property related to medical research. There is no information about further spread or additional impacts beyond data theft.

Defensive guidance

Organizations using REDCap should ensure their servers are not publicly exposed and apply any available security updates. Network segmentation and access controls should be reviewed to prevent unauthorized access. Monitoring for signs of compromise related to InfiniteRed malware is recommended.

Summary

This threat involves a cyber espionage operation attributed to Chinese actors who exploited exposed REDCap servers to deploy the InfiniteRed malware. The malware facilitated unauthorized access and data theft from a medical research institution in North America. The campaign targeted REDCap servers with no detailed information on specific vulnerabilities or affected versions. No vendor advisories or patches are referenced, and the servers are not cloud-hosted, implying remediation depends on the affected organizations. The attack highlights the risk of exposed REDCap instances being leveraged for espionage and data theft.

References

bleepingcomputer.com/news/security/chinese-hackers-breach-redcap-servers-steal-medical-research/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 16 Jun 2026, 09:30 UTC

References

Community reviews