United Health Centers Hit by Vice Society Ransomware

United Health Centers, a health care provider based in California with twenty-one (21) community health centers, was reportedly the victim of a ransomware attack that impacted the IT system of all locations. UHC has yet to release any statements regarding the attack, but the Vice Society ransomware group did claim responsibility this week and leaked the provider’s files that were supposedly stolen during the attack. BleepingComputer claims that the leaked files contain the following sensitive information: patient benefits, financial documents, audits, and patient lab results. UHC also has not released any information concerning the compromise of patient data. Vice Society, an emerging ransomware group that was first launched in June of 2021, has a history of targeting the healthcare industry, with one-fifth of their victims on their leak site being involved in healthcare. When BleepingComputer contacted Vice Society following the UHC attack, the ransomware group provided insight as to why they target hospitals: “They always keep our private data open. You, me and anyone else go to hospitals, give them our passports, share our health problems etc. and they don’t even try it protect our data. They have billions of government money. Do they steal that money?… If IT department don’t want to do their job we will do ours and we don’t care if it hospital or university.” CTAPT analysts will provide updates on this developing story as additional information is released.