The BlackCat ransomware group (otherwise known as ALPHV) has recently claimed that they have successfully compromised the networks of the major United States healthcare solutions provider Henry Schein. Henry Schein disclosed mid-October 2023 that they had experienced a cyberattack affecting their manufacturing and distribution operations, which required the organization to take some of their systems offline. The company proceeded by involving law enforcement as well as additional external experts to assist with containing the attack, and recommended that customers place orders through their specified Henry Schein representative or through the company’s tele-sales phone number. Approximately two (2) weeks later, BlackCat added Henry Schein to their dark web leak site claiming to have access to thirty-five (35) terabytes of sensitive data, including payroll data and shareholder information. Citing failed ongoing negotiations, the threat actors claimed to have re-encrypted the company’s devices as Henry Schein was in the process of restoring their systems. After releasing internal payroll data and shareholder folders, the published data and company’s overall entry were deleted from the leak site, indicating a settlement has been reached or that new ransom negotiations are underway. CTIX analysts will continue to monitor BlackCat’s activity and release updates when applicable.