Cybercriminal Groups Targeting Healthcare: Black Basta, Killnet, and LockBit

The healthcare industry has always been a prime target for cybercriminals due to the sensitive nature of the data it handles. In recent years, cybercriminal groups such as Black Basta, Killnet, and LockBit have been increasing their attacks on healthcare organisations, stealing sensitive patient data and causing significant financial and reputational damage.

• Black Basta is a Russian-speaking group that has been targeting healthcare organisations since at least 2018. They use various tactics, such as phishing emails and malware attacks, to gain access to sensitive data. Once they have access, they steal patient data and use it for financial gain. In some cases, they even threaten to publish the stolen data online if the victim organisation does not pay a ransom.

• Killnet is another cybercriminal group that has been targeting the healthcare industry. They are believed to be based in Eastern Europe and have been active since at least 2019. They use sophisticated techniques, such as supply chain attacks and zero-day vulnerabilities, to gain access to healthcare organisations’ networks. Once they have access, they steal sensitive patient data and demand a ransom for its return.

• LockBit is a newer cybercriminal group that has been active since 2019. They use a combination of ransomware attacks and extortion to target healthcare organisations. LockBit’s ransomware encrypts the victim organisation’s data, making it inaccessible, and then demands a ransom for its return. If the victim organisation refuses to pay the ransom, LockBit threatens to publish the stolen data online.

The consequences of these cyberattacks on healthcare organisations can be severe. Not only can patient data be compromised, but the operations of the healthcare organisation can also be disrupted, leading to potential harm to patients. In addition, healthcare organisations may face significant financial penalties for failing to protect patient data.

To protect against cybercriminal groups like Black Basta, Killnet, and LockBit, healthcare organisations must prioritise cybersecurity. This includes implementing strong access controls, monitoring network activity for suspicious behaviour, and providing regular cybersecurity training to employees. In addition, healthcare organisations should have an incident response plan in place in case of a cyberattack.

In conclusion, cybercriminal groups such as Black Basta, Killnet, and LockBit pose a significant threat to the healthcare industry. Healthcare organisations must take steps to protect against these threats to ensure the safety and privacy of patient data. By implementing strong cybersecurity measures and having an incident response plan in place, healthcare organisations can minimise the risk of cyberattacks and mitigate their impact if they do occur.