BlackCat strikes again – and this time it’s breached a healthcare giant
The infamous BlackCat ransomware actor appears to have claimed another high-profile victim after Fortune 500 healthcare organization Henry Schein was hit.
As reported by BleepingComputerransomware gang, also known as ALPHV, added Henry Schein to its data breach site, claiming that around 35 TB of data was accessed during the attack.
It also appears that the healthcare company has come to an agreement with the criminals after some back and forth discussions. Initially, the company obtained the decryption key and began restoring its systems, but before the restore was complete, BlackCat re-encrypted everything when negotiations failed.
Contains the incident
βDespite ongoing conversations with Henry’s team, we have received no indication of their willingness to prioritize the security of their customers, partners and employees, let alone protect their own network,β the gang said.
“Starting at midnight today, some of their internal payroll data and shareholder directories will be published on our collection blog. We will release more data daily.”
Shortly afterwards, BlackCat removed all Henry Schein data from its website, suggesting that the two eventually came to terms. There has been no word from the company on this news yet.
The attack occurred about two weeks before BlackCat began posting the data online. At the time, Henry Schein reported that it had suffered a cyberattack that impacted its manufacturing and distribution operations, and that the company was forced to take some of its systems offline to limit the damage.
βHenry Schein immediately took precautionary measures, including taking certain systems offline and other steps intended to mitigate the incident, which resulted in a temporary disruption to some of Henry Schein’s business operations. The company is working to resolve the situation as quickly as possible,” the spokesperson said. it said.
As usual, the company alerted the police and called in forensic experts to assist with the investigation. It also urged customers at the time to place orders through a Henry Schein representative or over the phone.