Rhysida Offers to Sell Children’s Hospital Data for $3.4M
February 28, 2024 – Published on HealthcareInfoSecurity
Ransomware group Rhysida is offering to sell “exclusive data” stolen from a Chicago pediatric hospital for $3.4 million on the dark web, while the hospital struggles to recover its IT systems, including its electronic health records and patient portal, one month after the attack.
Ann & Robert H. Lurie Children’s Hospital of Chicago, which cares for more than 220,000 patients a year, said in a statement Thursday that it is aware of Rhysida’s dark web claims, but it declined to share details about the incident.
While Rhysida is not considered one of the most “prolific” ransomware groups, the gang is an established RaaS group, said Jason Baker, senior threat intelligence consultant at GuidePoint Security.
“Of the attacks we observed across all industries in 2023, Rhysida was responsible for 74 out of 4,519, or roughly 2%. While this figure may sound small, it still places the group within the top 25% of the 63 distinct ransomware groups we monitored in 2023, in terms of victim volume,” he said.
“When looking strictly at victims in healthcare, Rhysida accounted for 4 of the 292 attacks we observed, or 4% of all observed healthcare ransomware attack,” he said.
Read More HERE.