CISA & FBI ADVISORY
AA24-060A: ALPHV BlackCat Ransomware Deployment Targeting Healthcare Organizations
Key Facts
- Official advisory designation: AA24-060A.
- Published on 2024-02-29 by CISA & FBI.
- Directly connected to 2 prosecution records in this library.
Referenced Common Vulnerabilities and Exposures (CVEs)
CVE-2024-21412
Related Primary Court Cases
alleged 2024-02-21
ALPHV / BlackCat Ransomware Attack on Change Healthcare
Devastating ransomware attack and data extortion of Change Healthcare (UnitedHealth Group) that paralyzed medical billing, prescription processing, and healthcare provider reimbursement nationwide.
6 techniques
View case →
convicted 2024-02-21
Change Healthcare Ransomware Outage (ALPHV / BlackCat)
Nationwide healthcare billing and pharmacy clearinghouse paralyzed by an ALPHV/BlackCat ransomware deployment. Threat actors gained initial access through an unmonitored Citrix portal server lacking multi-factor authentication, exfiltrating 6 terabytes of protected health data and forcing a 350 Bitcoin ($22 million) extortion payout amidst an estimated $3+ billion systemic recovery cost.
3 techniques
View case →