Security News > 2024 > February > LockBit shows no remorse for ransomware attack on children's hospital
Ransomware gang LockBit is claiming responsibility for an attack on a Chicago children's hospital in an apparent deviation from its previous policy of not targeting nonprofits.
Stooping to new lows, the criminals are reportedly unwilling to reverse the attack on Saint Anthony Hospital, as they had done in previous cases such as Toronto's SickKids hospital.
Saint Anthony Hospital confirmed the attack via a statement published this week, saying files containing patient information had been copied by an unknown attacker.
In response to an affiliate that attacked Toronto's SickKids hospital last year, LockBit formally apologized, issued a free decryptor, and supposedly booted that affiliate out of its program for violating the rules.
We've been unable to get in touch with the spokesperson for the gang to ask about the attack and shift in approach, but the malware collectors at vx-underground were under the impression that LockBit was either ignorant to the fact Saint Anthony was a nonprofit, or simply didn't care.
"The evolution of cybersecurity over the last decade has proved that criminal gangs have also had to pivot in terms of how they attack and financially conquer. Ransomware has become a different beast where data has become even more of the focal point in the way it has become a weapon of extortion rather than just relying on an encryption attack followed by ransom demands."
- Capital Health attack claimed by LockBit ransomware, risk of data leak (source)
- Ransomware attack forces 18 Romanian hospitals to go offline (source)
- Ransomware attack forces 21 Romanian hospitals to go offline (source)
- Ransomware attack forces 25 Romanian hospitals to go offline (source)
- Ransomware attack forces 100 Romanian hospitals to go offline (source)
- LockBit claims ransomware attack on Fulton County, Georgia (source)
- ScreenConnect servers hacked in LockBit ransomware attacks (source)
- Victoria court recordings exposed in reported ransomware attack (source)
- After injecting cancer hospital with ransomware, crims threaten to swat patients (source)
- US mortgage lender loanDepot confirms ransomware attack (source)