U.S. Hospital, U.S. Hospital, U.S. Hospital and U.S. Hospital: Hospitals being hit in coordinated, targeted ransomware attack from Russian-speaking criminals

Coordinated Ryuk Ransomware Attack Disrupts U.S. Hospitals Amid Pandemic

Over a 24-hour period starting Monday, six U.S. hospitals spanning from California to New York were struck by a targeted Ryuk ransomware attack. The malware, which encrypts critical data, forced affected facilities to halt noncritical surgeries and reroute patient care in some cases. Cybersecurity analysts warn the disruption could have life-threatening consequences, particularly as hospitals remain strained by the ongoing COVID-19 pandemic.

The attack has been attributed to Russian-speaking cybercriminals, who launched the campaign in a coordinated effort. Ryuk ransomware, known for its high-impact extortion tactics, has increasingly been deployed against healthcare institutions, exploiting vulnerabilities in systems already under pressure. The timing and precision of the assault suggest a deliberate strategy to maximize disruption and financial gain. Authorities and security experts continue to assess the full scope of the incident.

Source: https://www.washingtonpost.com/national-security/hospitals-being-hit-in-coordinated-targeted-ransomware-attack-from-russian-speaking-criminals/2020/10/28/e6e48c38-196e-11eb-befb-8864259bd2d8_story.html

American Hospital Association cybersecurity rating report: https://www.rankiteo.com/company/american-hospital-association

"id": "AME1781270254",
"linkid": "american-hospital-association",
"type": "Ransomware",
"date": "10/2020",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'California, New York, and other U.S. '
                                    'states',
                        'type': 'Hospital'}],
 'data_breach': {'data_encryption': 'Yes',
                 'sensitivity_of_data': 'Critical patient data'},
 'description': 'Over a 24-hour period starting Monday, six U.S. hospitals '
                'spanning from California to New York were struck by a '
                'targeted Ryuk ransomware attack. The malware encrypted '
                'critical data, forcing affected facilities to halt '
                'noncritical surgeries and reroute patient care in some cases. '
                'The attack has been attributed to Russian-speaking '
                'cybercriminals, who launched the campaign in a coordinated '
                'effort to maximize disruption and financial gain.',
 'impact': {'data_compromised': 'Critical data encrypted',
            'operational_impact': 'Halted noncritical surgeries, rerouted '
                                  'patient care',
            'systems_affected': 'Hospital systems'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial gain, disruption',
 'ransomware': {'data_encryption': 'Yes', 'ransomware_strain': 'Ryuk'},
 'references': [{'source': 'Cybersecurity analysts and authorities'}],
 'threat_actor': 'Russian-speaking cybercriminals',
 'title': 'Coordinated Ryuk Ransomware Attack Disrupts U.S. Hospitals Amid '
          'Pandemic',
 'type': 'Ransomware'}