BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare
Summary: A BlackCat/ALPHV affiliate known as "Notchy" posted on the Russian-language Ramp forum that Change Healthcare paid a $22 million ransom for a decryption key and to keep four terabytes of stolen data offline, and that BlackCat then withheld his commission and suspended his account. BlackCat responded by announcing it was closing the project and had found a buyer for its source code, while researchers including Emsisoft's Fabian Wosar said the group was exit-scamming affiliates rather than being seized.
What's compelling: The affiliate says the stolen data is still in his hands after the $22 million payment, and he named Medicare and other major insurance and pharmacy networks among the affected partners - so the payment bought neither deletion nor silence, and the person now holding the data is angry about being cut out.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·