MTI Inc Faces Major Data Breach by Everest Ransomware Group
Everest Ransomware Group Targets MTI, Inc. in Significant Data Breach
MTI, Inc., a specialized medical equipment manufacturer based in Salt Lake City, Utah, has allegedly fallen victim to a ransomware attack orchestrated by the notorious Everest ransomware group. This breach, resulting in the exfiltration of 900 GB of sensitive data, highlights the escalating threat cybercriminals pose to the healthcare sector.
About MTI, Inc.
Established in 1999, MTI, Inc. has made a name for itself in the healthcare services sector, focusing on the design, manufacture, and sale of medical equipment. The company is recognized for its innovative solutions, particularly in developing powered chairs and tables that enhance medical practice efficiency. With an annual revenue of approximately $31.3 million and a workforce of around 36 employees, MTI has carved out a niche in several medical specialties, including podiatry, dermatology, and oral surgery. Their dedication to quality and adherence to regulatory standards, such as ADA requirements, sets them apart in the industry.
Details of the Attack
The Everest ransomware group has claimed responsibility for the attack on MTI, Inc., asserting that they have accessed and exfiltrated a substantial amount of data. The group has threatened to release this data publicly within a 13 to 14-day timeframe unless their demands are met. Screenshots, including a detailed file tree, have been provided as evidence of the breach. As of now, MTI, Inc. has not released an official statement regarding the incident.
Profile of the Everest Ransomware Group
Active since December 2020, the Everest ransomware group is notorious for its double extortion tactics, targeting sectors such as healthcare and aerospace. The group has evolved into an Initial Access Broker, selling unauthorized access to networks to other cybercriminals. Their focus on healthcare organizations, including surgical centers, underscores their strategic targeting of sectors with sensitive data. Everest employs sophisticated tactics, including lateral movement and credential access, to infiltrate and exploit target networks.
Potential Vulnerabilities
MTI, Inc.'s emphasis on innovation and compliance may have inadvertently exposed them to cyber threats. Operating in the healthcare sector, they handle sensitive data, making them an attractive target for ransomware groups like Everest. The attack on MTI, Inc. serves as a stark reminder of the vulnerabilities faced by organizations in the healthcare industry, emphasizing the need for comprehensive cybersecurity measures.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!