lockbit2 attacks Vital Prev

Incident Date:

May 24, 2022

World map



lockbit2 attacks Vital Prev


Vital Prev




São Paulo, Brazil

Vila Mariana, Brazil

First Reported

May 24, 2022

Vital Prev Suffers Ransomware Attack, Operating in Healthcare Services Sector

Vital Prev, a company specializing in healthcare and occupational safety, has been targeted by the ransomware group Lockbit2. The attack was announced on the group's dark web leak site, and the victim's website is currently under threat. With over 19 years of operation, Vital Prev is renowned for its expertise in occupational medicine and preventive healthcare.

The company's services encompass the Programa de Controle Médico de Saúde Ocupacional (PCMSO), mandated by Norma Regulamentadora nº07 (NR-7), designed to safeguard and maintain the health of employees against occupational risks. Additionally, Vital Prev provides Laudo Técnico das Condições Ambientais do Trabalho (LTCAT), a critical document for characterizing exposure to harmful agents and informing the Perfil Profissiográfico Previdenciário (PPP).

Boasting a multidisciplinary team of medical professionals, engineers, and security experts, Vital Prev excels in delivering personalized healthcare solutions tailored to their clients' needs. The company's proficiency in ergonomics and risk management is evident through its offerings, such as the Programa de Gerenciamento de Riscos (PGR) and the Avaliação Ergonomia Preliminar (AET), aimed at optimizing work environments for employee well-being.

The Growing Threat of Ransomware in Healthcare

The attack on Vital Prev signifies a concerning trend of increasing ransomware attacks on healthcare providers, posing significant risks to patient safety and care. In 2023 alone, 46 hospital systems fell victim to ransomware, with 32 instances involving data theft. The American Hospital Association has labeled these incidents as "threat-to-life crimes," emphasizing the dire implications for patient care and safety.

The susceptibility of Vital Prev to such an attack may stem from the escalating sophistication and aggression of ransomware actors, who increasingly target vulnerable sectors like healthcare and public health organizations. Despite Vital Prev's expertise in risk management and ergonomics, the incident highlights the critical need for comprehensive cybersecurity measures to fend off these threats.

The ransomware attack on Vital Prev accentuates the crucial role of robust cybersecurity defenses in the healthcare sector, where disruptions can gravely affect patient safety and care. It is imperative for organizations to continuously evolve their security strategies to mitigate the advancing tactics of ransomware actors.


  • Vital Prev - Home
  • Ransomware Attacks: Death Threats, Endangered Patients and Millions ...
  • Ransomware Attacks on Hospitals Have Changed | Cybersecurity

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.