Ransomware Bites 400 Veterinary Hospitals
Summary: National Veterinary Associates, which owns roughly 700 veterinary hospitals and animal boarding facilities across the U.S., Canada, Australia and New Zealand, discovered a ransomware outbreak on the morning of Sunday, Oct. 27, and a source close to the investigation told KrebsOnSecurity that Ryuk infected approximately 400 locations, including Active Directory and Exchange servers. NVA chief marketing officer Laura Koester said all hospitals stayed open and patient record access was fully restored, while an internal Nov. 6 update from new technology head Greg Hartmann said the virus found three smaller points of entry through accounts unaffiliated with NVA that were opened within its network.
What's compelling: A source told KrebsOnSecurity this was the second Ryuk strike on NVA this year, and the U.K.'s National Cyber Security Centre advisory notes Ryuk is often not observed until days to months after the initial infection, giving attackers time to map critical systems before detonating - so the dwell time, not the encryption event, is where this was decided.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- Ransomware Defense Using the Wazuh Open Source Platform Cyber Risks ·