Hackers demand $50 million in ransomware attack on London's health service



In early June 2024, London-based medical services provider

Synnovis was hit by a large-scale ransomware attack that affected hospital services. It was discovered that the attack was carried out by a Russian-speaking hacker group called Qilin, who demanded a ransom of $50 million (approximately 7.89 billion yen) from Synnovis.

UK Hospital Hackers Say They've Demanded $50 Million in Ransom - Bloomberg
https://www.bloomberg.com/news/articles/2024-06-18/uk-hospital-hackers-say-they-ve-demanded-50-million-in-ransom



Hackers demand $50M ransom payment from UK lab provider following hospital disruption - SiliconANGLE

https://siliconangle.com/2024/06/18/hackers-demand-50m-ransom-payment-uk-lab-provider-following-hospital-disruption/



On June 4, 2024, Synnovis was hit by a ransomware attack that affected all of its IT systems.

A ransomware attack caused hospital systems to stop working, making it impossible to perform blood transfusions or surgeries, leading to chaos at several hospitals in London and the cancellation of scheduled deliveries - GIGAZINE



The attack was carried out by a Russian-speaking hacker group called Qilin, and news site The Bloomberg said it was able to contact a representative of Qilin through a messaging account associated with Qilin.

According to the statement, a Qilin representative apologised to those who suffered as a result of the ransomware attack, but refused to take responsibility for the damage, justifying the attack as 'in retaliation for the British government's involvement in an unspecified war'.

The attack on Synnovis was carried out using a so-called zero-day vulnerability that has not been publicly disclosed, the company said, adding that The Bloomberg has not been able to independently verify the vulnerability.

Qilin also explained that following the ransomware attack, he demanded a $50 million ransom from Synnovis, but after the 120-hour deadline, no payment was received, he cut off contact.

in Security, Posted by logc_nt