Clop ransomware gang targeting US healthcare, HHS warns

Russian-backed ransomware gang Clop poses a major threat to the healthcare and public health sector as it has allegedly attacked Franklin, Tenn.-based Community Health Systems, the Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center wrote in its Feb. 22 brief. 

Advertisement

Six things to know about Clop:

  1. Clop is a Russia-linked ransomware group that has been active since February 2019.
  2. Most recently, the group claimed responsibility for a mass-hacking of 130 organizations, including Franklin, Tenn.-based Community Health Systems. The attack lasted 10 days and allegedly compromised patient health data, yet the HHS says these claims have been unconfirmed.
  3. Clop operates as a ransomware as a service.
  4. In 2021, 77 percent of the group’s attacks were attempts at hacking critical infrastructure industry.  
  1. In June 2021, law enforcement arrested six individuals in Ukraine linked to Clop, but according to the HHS, this has not deterred them.
  2. HHS is recommending organizations patch the GoAnywhere software flaw that Clop has recently utilized to attack Community Health Systems, and urged healthcare organizations to stay vigilant.

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.