November 6, 2023 TLP:CLEAR Report: 202311061700 Executive Summary A relatively new ransomware group and strain known as BlackSuit, with significant similarities to the Royal ransomware family, will likely be a credible threat to the Healthcare and Public Health (HPH) sector. Discovered in early May 2023, BlackSuit’s striking parallels with Royal, the direct successor of the…
Mulkay Cardiology Consultants notifies almost 80,000 of ransomware attack
On Friday, Mulkay Cardiology Consultants at Holy Name Medical Center (“Mulkay”) notified the Maine Attorney General’s Office of an incident they discovered at the beginning of September. According to their report, a total of 79,582 people were affected by the breach. A copy of their notification letter to patients, appended to the submission, explained that…
Cardiovascular Consultants (CVC Heart) allegedly hit by ransomware (1)
Cardiovascular Consultants LTD (CVC Heart) in Arizona may or may not have been the victim of a ransomware attack, but they have not responded to inquiries about that. So far, all we have are unsubstantiated claims by a ransomware group and an alleged data archive download that doesn’t download. On October 25, Cardiovascular Consultants LTD…
Data of 171,871 Deer Oaks Behavioral Health clients and employees dumped by ransomware group
Deer Oaks Behavioral Health in Texas is a behavioral health services provider of psychological and psychiatric services to residents of long-term care and assisted living facilities. On October 31, they issued a substitute notice on their website about a ransomware incident they experienced. According to their notice, they discovered the attack on September 1. “The…
Update: Sensitive patient data leaked from TransForm ransomware incident; hospitals and centers affected
As predicted, Daixin has leaked the third part of the data they exfiltrated from TransForm and Canadian healthcare entities. DataBreaches reported the first leak when Daixin publicly claimed responsibility for the attack. The second leak followed two days later, and less than one day later, the third tranche dropped. As with the first two leaks,…
Summit Health has hundreds of locations. Were they victims of a cyberattack by LockBit3.0?
Summit Health is a for-profit, multi-specialty medical practice headquartered in Berkeley Heights, New Jersey. It describes itself as a “physician-driven, patient-centric network committed to simplifying the complexities of health care and bringing a more connected kind of care.” They have more than 2,800 providers, 13,000 employees, and over 370 locations in New Jersey, New York,…