Ransomware Attack Compromises Prentke Romich Company Data

Incident Date: Sep 18, 2024

Attack Overview
VICTIM
Prentke Romich Company
INDUSTRY
Healthcare Services
LOCATION
USA
ATTACKER
Fog
FIRST REPORTED
September 18, 2024

Ransomware Attack on Prentke Romich Company by Fog Ransomware Group

Prentke Romich Company (PRC-Saltillo), a leader in augmentative and alternative communication (AAC) solutions, has fallen victim to a ransomware attack orchestrated by the Fog ransomware group. The breach, discovered on September 19, has compromised 250 GB of sensitive data, posing significant risks to the company's operations and client base.

About Prentke Romich Company

Founded in 1966 and headquartered in Wooster, Ohio, PRC-Saltillo specializes in developing speech-generating devices (SGDs) and communication apps for individuals with complex communication disorders. The company is renowned for its innovative products like the Accent series, which feature advanced software and customizable vocabularies. PRC also offers extensive educational resources and training to support users and professionals, making it a standout in the AAC field.

Attack Overview

The Fog ransomware group claimed responsibility for the attack via their dark web leak site. The breach involved unauthorized access to 250 GB of data, potentially including sensitive information related to PRC's specialized services and client base. The attack highlights the vulnerabilities that even well-established companies in the healthcare services sector can face.

About Fog Ransomware Group

Fog ransomware, which emerged in November 2021, primarily targets Windows systems. It is known for encrypting files and appending extensions like ".FOG" or ".FLOCKED." The group has been particularly disruptive in the education and recreation sectors. Attackers typically exploit compromised VPN credentials to gain remote access, disable security measures, and encrypt critical files, making recovery extremely difficult.

Potential Vulnerabilities

PRC-Saltillo's extensive use of digital platforms and sensitive client data makes it a lucrative target for ransomware groups like Fog. The attackers likely exploited vulnerabilities in the company's VPN or other remote access systems to infiltrate their network. The breach underscores the importance of stringent cybersecurity measures, especially for companies handling sensitive healthcare data.

Impact and Implications

The attack on PRC-Saltillo not only jeopardizes the company's data but also threatens the privacy and security of its clients, many of whom rely on PRC's devices for essential communication. The breach could have far-reaching implications, affecting the company's reputation and operational capabilities.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.