Having reportedly exploited an unknown 0-day vulnerability in the Remote Desktop Protocol (RDP) at five healthcare organizations, the hacker managed to steal these treasure troves. Now, he is selling over 689,000 patient records which include full names, social security numbers, physical addresses, dates of birth, insurance information, race, gender, and more such personal data.