Qilin Ransomware Hits Iowa's Performance Therapies Healthcare

Incident Date: Oct 01, 2024

Attack Overview
VICTIM
Performance Therapies, P.C.
INDUSTRY
Hospitals & Physicians Clinics
LOCATION
USA
ATTACKER
Qilin
FIRST REPORTED
October 1, 2024

Qilin Ransomware Group Targets Performance Therapies, P.C.

Performance Therapies, P.C., a prominent physical therapy provider based in Iowa, has fallen victim to a ransomware attack orchestrated by the Qilin ransomware group. This incident highlights the vulnerabilities faced by healthcare organizations, particularly those in the Hospitals & Physicians Clinics sector.

About Performance Therapies, P.C.

Founded in 1999 by David Williams, Performance Therapies has grown from a small operation in a basement to a well-established practice with multiple locations in Cedar Rapids, Coralville, Hiawatha, and Kalona. The clinic employs a team of 21 professionals dedicated to providing individualized care through physical therapy, athletic training, sports performance enhancement, and personal training. Their approach emphasizes hands-on manual therapy and one-on-one interactions, fostering a partnership in the recovery process. This commitment to personalized care and community involvement has made Performance Therapies a trusted provider in the region.

Attack Overview

The Qilin ransomware group claims to have exfiltrated sensitive data from Performance Therapies, including confidential agreements and financial documents. The attack underscores the risks faced by healthcare providers, who often handle large volumes of sensitive data. The breach could have significant implications for the clinic's operations and reputation, given its focus on individualized patient care and community engagement.

About the Qilin Ransomware Group

The Qilin ransomware group is known for its targeted attacks on various sectors, including healthcare. Unlike other ransomware groups, Qilin distinguishes itself by focusing on exfiltrating sensitive data before encrypting systems, increasing pressure on victims to comply with ransom demands. The group likely exploited vulnerabilities in Performance Therapies' network, potentially through phishing attacks or exploiting outdated software, to gain unauthorized access to their systems.

This incident serves as a reminder of the critical importance of cybersecurity measures, particularly for organizations handling sensitive data. As ransomware groups like Qilin continue to evolve their tactics, healthcare providers must remain vigilant to protect their systems and patient information.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.