A Serbian-linked hacking group has claimed responsibility for attacks against the Croatian platform FinInfo.hr and a healthcare institution, allegedly publishing thousands of records on a dark-web forum.
Croatian cybersecurity specialist Leon Juranić, co-founder and chief technology officer of ThreatLeap, said his company’s systems had identified two posts published by the Serbian group INF Group, according to Index.hr.
Juranić said the hackers claimed to have breached FinInfo.hr and published approximately 34,000 records from the platform’s database.
In a separate post, the group claimed to have targeted a healthcare institution whose name has not been made public. The hackers alleged that they obtained around 9,000 records, including sensitive information, diagnoses and patient data.
The claims have not been independently verified, and it was not immediately clear whether the published material was authentic or how it had been obtained.
INF Group, which is reportedly operating from Serbia, had recently also claimed responsibility for another cyber incident in which a database containing information on Croatian citizens was allegedly published.
The group claimed that the information originated from Croatia’s judicial system and warned that the incident was “only the beginning.”
Meanwhile, the Croatian Pension Insurance Institute said it had contained a cybersecurity incident affecting the HZMO Live – Contact Center application and restored secure communication with users.
The hackers had claimed to possess personal information including names, surnames, personal identification numbers, telephone numbers and email addresses.
The latest allegations have renewed concerns over the targeting of Croatian institutions and databases, particularly amid a broader rise in cyberattacks against public-sector, healthcare and critical infrastructure organizations across Europe.
