U.S. hospitals under attack by ransomware, experts say

BOSTON -- Federal agencies warned Wednesday that cybercriminals are unleashing a major ransomware assault against the U.S. health care system. Independent security experts say it has already hobbled at least four U.S. hospitals this month, and could potentially affect hundreds more.

In a joint alert, the FBI and two federal agencies warned that they had "credible information of an increased and imminent cybercrime threat to U.S. hospitals and health care providers." They said "malicious cyber actors" are targeting the sector with ransomware that could lead to "data theft and disruption of healthcare services."

Administrative problems caused by ransomware, which scrambles data into gibberish that can only be unlocked with software keys provided once targets pay up, could further stress hospitals burdened by a nationwide spike in covid-19 cases.

The attacks coincide with the presidential election, but do not appear to have any connection to it.

"We are experiencing the most significant cyber security threat we've ever seen in the United States," Charles Carmakal, chief technical officer of the cybersecurity firm Mandiant, said in a statement. He's concerned that the group may deploy malware to hundreds of hospitals over the next few weeks.

Alex Holden, CEO of Hold Security, which has been closely tracking the ransomware in question for more than a year, agreed that the unfolding offensive is unprecedented in magnitude for the United States.

Upcoming Events