threatintel
actor tracker
INC Ransom
Compromiseseverity: Critical2024-11-28

INC Ransom claims compromise of Alder Hey Children's + Liverpool Heart NHS

published by The Register
Actor
INC RansomRU · RussiaRansomware

Russian-speaking ransomware-as-a-service operation active since mid-2023, notable for sustained targeting of UK NHS trusts and U.S. healthcare providers. Major UK incidents: **NHS Dumfries and Gallow…

Summary

INC Ransom claimed near-simultaneous compromises of two Liverpool-area NHS Foundation Trusts: Alder Hey Children's Hospital (one of the UK's largest paediatric hospitals) and Liverpool Heart and Chest. The operators posted patient documents on their leak site as proof, marking the second sustained INC Ransom campaign against UK NHS trusts in eight months. The Alder Hey targeting — paediatric oncology and cardiology data — drew unusually pointed condemnation from UK government and healthcare-sector commentators.

Tags

healthcareransomwarepaediatricuknhs

Primary source

theregister.com

Other INC Ransom events