Ransomware Attack on Surrey Place Healthcare & Rehabilitation
Ransomware Attack on Surrey Place Healthcare & Rehabilitation
Victim Overview
Surrey Place Healthcare & Rehabilitation, a 74-bed Skilled Nursing facility located in Bradenton, Florida, was targeted in a cyberattack by the Rhysida ransomware group. The facility provides rehabilitation services, long-term care, and skilled nursing care for individuals in need of medical assistance and support.
Company Profile
The company focuses on improving the outcome and functional ability of each individual by offering a range of services, including short-stay rehabilitation, long-term care, and outpatient services. The facility is known for its specialized therapeutic modalities and expert assistance, helping patients achieve their highest level of functional independence.
Company Standout
Surrey stands out in the industry for its individualized approach to patient care, partnering with physicians, patients, and their families to ensure successful patient outcomes. The facility's separate rehabilitation unit with private suites provides a comfortable environment for recovery.
Company Vulnerabilities
Being in the healthcare sector, Surrey Place Healthcare & Rehabilitation is a prime target for threat actors due to the sensitive nature of the data they handle, including patient records and medical information. The facility's reliance on digital systems for patient care and administrative purposes makes them vulnerable to ransomware attacks like the one carried out by the Rhysida group.
Attack Overview
Rhysida ransomware targeted Surrey Place Healthcare & Rehabilitation's website, demanding a ransom of 6 BTC (approximately $390,000). While the specific amount of stolen data is undisclosed, it likely included sensitive information such as personally identifiable information (PII). Some data was leaked as a result of the attack, further emphasizing the impact of ransomware attacks on organizations.
Ransomware Group Details
The Rhysida Ransomware Group is known for its double extortion technique, stealing data before encrypting it and threatening to publish it unless a ransom is paid. The group primarily targets sectors like healthcare, education, government, and manufacturing. Rhysida's ransomware is deployed through various methods, including phishing campaigns, and is designed to target Windows Operating Systems.
Sources:
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!