hiveleak attacks Empress EMS
Incident Date:
July 26, 2022
Overview
Title
hiveleak attacks Empress EMS
Victim
Empress EMS
Attacker
Hiveleak
Location
First Reported
July 26, 2022
Empress EMS Suffers Ransomware Attack by Hiveleak Group
Empress EMS, a prominent healthcare services provider based in New York, has recently fallen victim to a ransomware attack orchestrated by the Hiveleak group. This incident was disclosed on the dark web leak site associated with the cybercriminal group, highlighting the breach of Empress EMS's official website. Operating in several counties including Westchester, Rockland, Ulster, Dutchess, Putnam, Sullivan, Orange, and the Bronx, Empress EMS is recognized as one of the most extensive and seasoned emergency and non-emergency response entities in the region.
With over 37 years of service, Empress EMS prides itself on delivering advanced patient care with a touch of personal compassion. The organization employs more than 1,100 highly trained professionals, ensuring top-tier mobile healthcare services. Its 24-hour communications center is equipped with one of the most sophisticated computer-aided dispatch systems available, further enhancing its operational efficiency.
Beyond its primary emergency services, Empress EMS actively participates in Mobile Integrated Health/Community Paramedicine initiatives. These include a variety of programs aimed at providing exceptional care, such as Community Paramedicine, NY Project Hope Crisis Counseling, Testing and Vaccination Programs, ET3 Emergency Triage, Treat, and Transport, and Telehealth in-person response programs.
The Hiveleak ransomware group's infiltration into Empress EMS's network led to the exfiltration and encryption of files, culminating in a significant data breach affecting over 318,558 patients. This cybersecurity incident has subsequently triggered a lawsuit against the company.
The healthcare sector's vulnerability to ransomware attacks is notably high due to the critical and sensitive nature of the data involved. Many healthcare providers, including hospitals, often lack the necessary resources and preparedness to effectively counteract such cyber threats, rendering them susceptible to attacks. In the wake of this breach, Empress EMS is now tasked with not only recovering from the current predicament but also fortifying its cybersecurity measures to avert future incidents.
Sources
- Empress EMS Official Website
- KonBriefing.com - Cyber Attacks 2022
- HIPAA Journal - New York Ambulance Service Discloses Ransomware Attack and 318K Record Data Breach
- The Cyber Express - Ambulance Service Provider Empress EMS Hit by Ransomware Attack
- HIPA Answers - Empress EMS Faces Lawsuit for Ransomware Attack
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.