OneBlood's virtual machines were affected by a ransomware attack

OneBlood, a large nonprofit blood center serving hospitals and patients in the United States, is experiencing an IT outage caused by a ransomware attack.

See also: Black Basta ransomware evolves and evades detection

The organization plays a critical role in ensuring a stable blood supply in the Southeast by collecting, testing and distributing a large volume of blood products. Because of this, there are concerns about procedures and treatments being affected.

BleepingComputer received an anonymous tip from one of its readers, who reported that OneBlood was having problems collecting blood samples at its donor centers and through its mobile blood collection units.

The center revealed that a ransomware attack has affected its software systems and is working with local and federal agencies to respond appropriately to the incident. Currently, the company has reverted to using manual processes, which are time-consuming and inevitably create inventory availability issues.

According to a source, the attack occurred over the weekend and the ransomware gang encrypted the organization's VMware hypervisor infrastructure

See also: VMware ESXi flaw used in ransomware attacks

To reduce the impact of the cyberattack, a coalition of blood centers and the AABB Disaster Task Force are directing blood products to OneBlood to keep the vital flow of blood flowing to hospitals and patients in need, despite the ransomware attack.

Although OneBlood is expressing a need for all blood types at this time, it is emphasizing the need for O Positive, O Negative, and platelet donations, so those eligible to donate are urged to schedule an appointment as soon as possible.

OneBlood has not provided many details about the ransomware incident, and the attack has not yet been claimed by any major threat group. The organization said it will notify individuals who may have been affected and offer credit monitoring services to mitigate the risk of their data being exposed.

Donor rewards have not been compromised, but OneBlood has disabled them until work is complete to restore the systems, at which point donor rewards will show the correct amount.

See also: Researchers hacked into Medusa Ransomware's Cloud Storage

A ransomware attack, such as the one at the OneBlood center, is a form of malware that locks a user’s or system’s files, demanding a ransom to restore access. These types of attacks have increased dramatically in recent years, targeting both individual users and large businesses. Typically, these attacks are spread through phishing emails or malicious websites and can cause serious damage, both financial and operational, to the target. It is essential to seek the right protection and maintain regular backups of your data in order to limit the risks of such attacks.

Source: bleepingcomputer