conti attacks Great HealthWorks
Incident Date:
March 9, 2022
Overview
Title
conti attacks Great HealthWorks
Victim
Great HealthWorks
Attacker
Conti
Location
First Reported
March 9, 2022
Great HealthWorks Suffers Ransomware Attack
Great HealthWorks, a healthcare services company, has been targeted by the ransomware group Conti, as reported on their dark web leak site. The company, which has been in operation since 2003, operates in the Healthcare Services sector and is known for its vertically integrated direct-to-consumer (D2C) business model.
The attack on Great HealthWorks is part of a broader trend of ransomware attacks on healthcare organizations. In 2023, there were 249 reported ransomware attacks against healthcare and public health organizations, with experts believing the actual number to be higher. The attack on Great HealthWorks is significant because it highlights the vulnerabilities of healthcare organizations to cyberattacks, particularly those that rely on digital systems for patient care and billing.
The Context of Ransomware Attacks in Healthcare
The ransomware attack on Great HealthWorks is not the first in the healthcare sector. In March 2024, the ransomware group AlphV, also known as BlackCat, targeted Change Healthcare, a unit of UnitedHealth Group's Optum division, in one of the most disruptive attacks in recent years. This attack crippled pharmacies across the US, including those in hospitals, and led to serious snags in the delivery of prescription medications.
The healthcare sector is particularly vulnerable to ransomware attacks due to the sensitive nature of its data and the critical services it provides. Healthcare organizations often struggle with outdated or inadequate cybersecurity measures, making them vulnerable to exploitation by cybercriminals. The consequences of these attacks extend beyond financial losses, impacting patient care, confidentiality, and public trust in healthcare institutions.
Great HealthWorks has not released a public statement regarding the ransomware attack. The company's website provides information about its mission, brands, and careers, but does not disclose its size or specific vulnerabilities that may have contributed to the attack.
The ransomware attack on Great HealthWorks underscores the need for healthcare organizations to prioritize cybersecurity measures to protect sensitive patient data and critical services. The attack also highlights the potential financial and operational disruptions that can result from such attacks, as well as the broader implications for patient care and confidentiality.
Sources
- Great HealthWorks. (n.d.). Home - Great HealthWorks. Retrieved April 10, 2024, from https://www.greathealthworks.com/
- NPR. (2024, March 9). Health industry struggles to recover from cyberattack on UnitedHealth. Retrieved April 10, 2024, from https://www.npr.org/sections/health-shots/2024/03/09/1237038928/health-industry-struggles-to-recover-from-cyberattack-on-a-unit-of-unitedhealth-gru
- Wired. (2024, March 4). Hackers Behind the Change Healthcare Ransomware Attack. Retrieved April 10, 2024, from https://www.wired.com/story/alphv-change-healthcare-ransomware-payment/
- HHS. (2024, March 5). HHS Statement Regarding the Cyberattack on Change Healthcare. Retrieved April 10, 2024, from https://www.hhs.gov/about/news/2024/03/05/hhs-statement-regarding-the-cyberattack-on-change-healthcare.html
- Logrhythm. (2024, March 12). Healthcare Ransomware Attacks: Understanding the Problem and Prevention Strategies. Retrieved April 10, 2024, from https://logrhythm.com/blog/healthcare-ransomware-attacks/
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.