Ransomware Attack on Gramercy Surgery Center by Everest Group Exposes 465GB of Data
Ransomware Attack on Gramercy Surgery Center by Everest Group
Overview of Gramercy Surgery Center
Gramercy Surgery Center, established in 2006, is a prominent outpatient surgical facility located in New York City, serving the communities of Manhattan and Queens. Recognized as one of the leading multispecialty centers in the area, it was rated a top outpatient surgery center by Newsweek in 2021. The center specializes in a wide array of outpatient surgical procedures, providing high-quality patient care through advanced medical technology and a skilled healthcare team.
Details of the Ransomware Attack
On July 16, 2024, Gramercy Surgery Center fell victim to a ransomware attack orchestrated by the Everest ransomware group. The attack resulted in a significant data breach, compromising 465GB of sensitive information. This incident highlights the growing threat of cyberattacks on healthcare institutions and underscores the critical need for robust cybersecurity measures to protect patient data and maintain operational integrity.
About the Everest Ransomware Group
The Everest Ransomware Group is a notorious cybercriminal organization active since at least December 2020. Known for its involvement in ransomware attacks, data exfiltration, and initial access brokering, Everest targets organizations across various industries, including healthcare. The group employs a combination of legitimate compromised user accounts and Remote Desktop Protocol (RDP) for lateral movement, using AES and DES algorithms to encrypt files.
Vulnerabilities and Penetration
Healthcare institutions like Gramercy Surgery Center are particularly vulnerable to ransomware attacks due to the sensitive nature of the data they handle and the critical need for operational continuity. The Everest group likely penetrated Gramercy's systems through compromised user accounts or vulnerabilities in their RDP setup. The attack underscores the importance of stringent cybersecurity measures, including regular system updates and employee training on recognizing phishing attempts.
Impact on Gramercy Surgery Center
Gramercy Surgery Center employs approximately 63 individuals and reports an annual revenue of about $13.2 million. The attack not only jeopardizes patient data but also threatens the center's reputation and operational efficiency. As a leading outpatient surgical facility, Gramercy must now navigate the challenges of restoring its systems and regaining patient trust.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!