Ransomware attacks continue to evolve with double-extortion tactics and targeted enterprise campaigns. This section analyzes ransomware groups, attack patterns, and defensive strategies CISOs must understand.
121 articles
Four San Diego hospitals suffered a ransomware attack in 2021, crippling operations and causing severe patient care disruptions. The incident led to a 48% increase in wait times and a 128% rise in patients leaving without care.
Signature Services, a US-based professional services provider, suffered a ransomware attack attributed to the Play group, resulting in file encryption and operational disruption. The incident was publicly claimed by the attackers, though the organization has not confirmed details.
Preferred Financial Group suffered a ransomware attack attributed to the Play group, resulting in unauthorized access and operational disruption. The incident was publicly claimed by the threat actor, though the organization has not confirmed the breach.
Centro Universitário CESMAC in Brazil suffered a ransomware attack attributed to the krybit group, resulting in potential IT system encryption and service disruption. The incident was publicly claimed by the threat actor on their darknet blog.
naskdoorinc.com, a US-based manufacturing company, suffered a ransomware attack by the safepay group, causing operational disruption across southeastern Pennsylvania and northern Delaware. The incident may involve data encryption or theft, though technical specifics remain unconfirmed.
Minnesota water utilities suffered a coordinated ransomware attack impacting over 30 organizations, including Braham and Plymouth Water Utilities. Attackers exploited exposed PLCs, resulting in operational outages and boil water notices.
Vernon & Waldrep, a Texas-based healthcare organization, suffered a ransomware attack by Global Secret Group, resulting in the compromise of 274 GB of data. Over 56,000 files, including sensitive healthcare and mental health specialist information, were exposed.
MBM Law, a South Carolina-based law firm, suffered a ransomware attack attributed to the threat actor dragonforce. The incident resulted in operational disruption and a ransomware claim against the firm.
L3Harris, a US-based aerospace and defense technology company, suffered operational disruption following a ransomware attack attributed to Kyber Group. The incident targeted US operations and was publicly claimed by the threat actor.
Tong Kong E & E Sdn Bhd, a Malaysian manufacturing company, suffered a ransomware attack by Black X, resulting in the exposure of customer and banking records. The breach poses significant financial and reputational risks.
Della Casa Group AG suffered a ransomware attack attributed to incransom, resulting in the compromise of 86,332 files and 15,359 folders containing sensitive client, financial, and project data. The breach involved approximately 240 GB of data and was publicly claimed by the threat actor.
Thai Seng International Co. Ltd suffered a ransomware attack by the nightspire group, resulting in the encryption of administration and marketing data. Client information was compromised and business operations were disrupted.