FBI disrupts ransomware network targeting hospitals and others

The FBI last night seized control of servers and websites used by the Hive ransomware network to target hospitals and other critical infrastructure, and infiltrated the network in July to provide decryption keys to victims and prevent $130 million in ransom payments, the Justice Department announced today. The agency worked with Germany and the Netherlands to seize the servers and websites, disrupting the gang’s ability to attack and extort victims. 

John Riggi, AHA’s national advisor for cybersecurity and risk, said, “The disruption and dismantlement of the HIVE ransomware by the FBI, the U.S. Department of Justice and international partners is welcome news and will help make hospitals safer against high-impact ransomware attacks, which have disrupted health care delivery and jeopardized patient safety. As U.S. Attorney General Garland stated, this coordinated international law enforcement action was assisted with victim cooperation, including hospitals, and through the robust exchange of cyberthreat information with the private sector. The AHA is proud to partner with all federal law enforcement, health care and national security agencies to facilitate and amplify the rapid and effective exchange of cyberthreat information with the field — to help defend health care and the nation against these sinister cyber threats.” 

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.