Brazilian medical diagnostics company Grupo Fleury has been hit by a ransomware attack. The company took its systems offline, disrupting its business operations.
See also: Clop ransomware: The gang returns after the arrests of its members
Grupo Fleury is the largest medical diagnostics company in Brazil, with over 200 service centers and more than 10,000 employees. The company performs approximately 75 million clinical tests a year.
Since yesterday, Fleury's website has started displaying a warning that the company has been attacked and that the systems are no longer accessible.
“We inform you that our systems are currently unavailable and that we are prioritizing the restoration of services,” a warning states.
See also: Mysterious ransomware payment detected on RubRatings site
“The causes of this unavailability came from an attempted external attack on our systems.”
With their systems shut down, business operations are disrupted and patients cannot schedule lab tests or other clinical exams online.
Grupo Fleury reportedly hit by ransomware
While local media have received confirmation that the company suffered a cyberattack, Grupo Fleury has not officially confirmed a ransomware attack.
However, multiple sources have told BleepingComputer that Grupo Fleury was attacked by the ransomware operation known as REvil (also known as Sodinokibi).
This ransomware operation is responsible for numerous high-profile attacks, including nuclear weapons contractor Sol Oriens and JBS, the world's largest meatpacking company.
REvil is known to steal files before encrypting devices and then using the stolen data as leverage to get a company to pay the ransom.
See also: Hackers combine ransomware and DDoS attacks to target victims
From the ransomware sample, no evidence of stolen data or mention of the victim's name has been shared at this time.
If the data has been stolen, Grupo Fleury's data is of significant concern, as it could contain vast amounts of personal and medical patient data.
Information source: bleepingcomputer.com
