United Health Centers ransomware attack claimed by Vice Society
The California-based United Health Centers suffered a ransomware attack that reportedly disrupted all of their locations and resulted in the theft of patient data.
United Health Centers is a California health care provider with twenty-one community health centers serving Fresno, Kings and Tulare counties.
On August 31, BleepingComputer was told by a cybersecurity industry source that United Health Centers was reeling from a Vice Society ransomware attack that forced them to shut down their entire network.
We were told that the outage caused disruption to the computer systems of all of their locations and that they had started to reimage computers and recover data from offline backups.
At the time, BleepingComputer contacted UHC several times but did not receive a response to any of our queries to confirm the attack.
This week, the Vice Society ransomware gang disclosed files that threat actors allegedly stole from the United Health Centers during the August attack.
We were told that the leaked files contain sensitive information, such as patient benefits, financial documents, patient lab results and audits.
BleepingComputer contacted UHC again last night regarding the leaked data, but received no response.
Additionally, UHC did not disclose this attack or the potential compromise of patient data on its website.
20% of Vice Society victims are in healthcare
Vice Society is a relatively new ransomware operation that launched in June 2021, with 20% of companies listed on their healthcare data breach site.
After learning of the attack on United Health Centers, BleepingComputer emailed Vice Society to find out why they are allowing hospitals to be targeted.
Their answer to our question is below:
They always keep our private data open. You, me and anyone else go to hospitals, give them our passports, share our health problems, etc. and they don’t even try to protect our data. They have billions of government money. Are they stealing this money?
The US President has given a large sum to protect government networks and where is their protection? Where is our protection?
If the IT department doesn’t want to do their job, we’ll do ours and it doesn’t matter if it’s a hospital or a university. â- Vice Society ransomware.
While some ransomware gangs prohibit attacks on hospitals and medical facilities, unfortunately, a growing number of new ransomware gangs are not prohibiting these types of attacks.