Everest Ransomware Strikes Woodlake Addiction Recovery Center
Everest Ransomware Group Targets Woodlake Addiction Recovery Center
Woodlake Addiction Recovery Center, a prominent addiction treatment facility in Louisiana, has fallen victim to a ransomware attack orchestrated by the Everest ransomware group. This incident underscores the growing threat of cyberattacks on healthcare organizations, particularly those specializing in addiction recovery services.
About Woodlake Addiction Recovery Center
Woodlake Addiction Recovery Center is a comprehensive facility dedicated to helping individuals overcome substance use disorders. With locations in Abbeville, Baton Rouge, and Ethel, the center employs approximately 242 staff members, including psychiatrists, psychologists, counselors, and nurses. Woodlake is known for its holistic and personalized approach to addiction treatment, offering a full continuum of care that includes detoxification, therapy, and long-term recovery support. The center's commitment to individualized treatment and its four-phase program structure distinguish it in the addiction recovery industry.
Details of the Ransomware Attack
The Everest ransomware group claims to have exfiltrated 180 GB of sensitive data from Woodlake Addiction Recovery Center. The stolen data reportedly includes electronic medical records, test results, patient histories, private patient information, and billing details. The attackers have demanded that a representative from Woodlake initiate contact through a provided link before a specified deadline, threatening to leak the data if their demands are not met.
Profile of the Everest Ransomware Group
The Everest ransomware group is a Russian-speaking cybercriminal organization known for its double extortion tactics. Active since December 2020, the group has increasingly targeted the healthcare sector, exploiting vulnerabilities in medical facilities to access sensitive data. Everest distinguishes itself by not only encrypting data but also threatening to leak it, thereby increasing pressure on victims. The group has also transitioned into an Initial Access Broker, selling unauthorized access to networks to other ransomware groups.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!