Employees of the Virginia Department of Health Professions received an unwelcome surprise in February, when an anonymous hacker changed the organization’s homepage to a virtual ransom note.

According to the online note, the hacker claimed to have stolen 8.3 million patients’ personal information in Virginia, deleted any back up files of the information and demanded $10 million for the information to be returned safely.

According to local Virginia news reports, as well as Wikileaks.org, an online site dedicated to publishing leaked documents, the hacker said, “I made an encrypted backup and deleted the original. Unfortunately for Virginia, their backups seem to have gone missing, too. Uhoh :( “ and said officials could reach him within seven days by emailing hackingforprofit@yahoo.com.