---
title: RansomHub Strikes Again
description: "Image of a hacker in a hoodie, sitting at a computer, surrounded by code and screens displaying sensitive patient information. Background image of a hospital room with patients' names and medical records on the bedside tables.\n\nHashtags: #RansomHub #CyberAttack #PatientData #HealthcareSecurity #Hacking"
image: https://blackbearmssp.com/hubfs/ransomhub.webp
---

[Skip to content](https://blackbearmssp.com/blogs/ransomhub#main-content)

![blackbearmssp-logo](https://blackbearmssp.com/hs-fs/hubfs/blackbearmssp-logo.jpg?width=179&height=110&name=blackbearmssp-logo.jpg)

- [Home](https://blackbearmssp.com)
- Services
  
  Show submenu for Services 
  
    - [Help Desk](https://blackbearmssp.com/help-desk)
    - [Managed Services](https://blackbearmssp.com/managed-services)
    - [Data Backup and Recovery](https://blackbearmssp.com/data-backup-and-recovery)
    - [Network Security](https://blackbearmssp.com/network-security)
    - [Email Security](https://blackbearmssp.com/email-security)
    - [Cybersecurity](https://blackbearmssp.com/cyber-security)
    - [Encryption](https://blackbearmssp.com/encryption)
    - [Phishing as a Service](https://blackbearmssp.com/phishing)
    - [Dark Web Searches](https://blackbearmssp.com/darkweb-search)
    - [HIPAA and Regulatory Compliance](https://blackbearmssp.com/hipaa-consulting-and-compliance)
    - [Cloud Computing](https://blackbearmssp.com/cloud-computing)
    - [Cybersecurity Training](https://blackbearmssp.com/cyber-training)
- Content and Extras
  
  Show submenu for Content and Extras 
  
    - [The Ultimate Guide to Ransomware](https://blackbearmssp.com/ransomware-guide)
    - [The Ultimate Guide to Phishing](https://blackbearmssp.com/land-phishing)
    - [The Dark Web Explained](https://blackbearmssp.com/land-darkweb)
    - [The Guide to HIPAA Compliance](https://blackbearmssp.com/land-hipaa)
    - [Blogs](https://blackbearmssp.com/blogs)
    - [Free Dark Web Scan](https://blackbearmssp.com/dark-web-scan-0)
- [About](https://blackbearmssp.com/about)
- [Referral Program](https://blackbearmssp.com/referral-program)

Open main navigation

Close main navigation

- [Home](https://blackbearmssp.com)
- Services
  
  Show submenu for Services 
  
    - [Help Desk](https://blackbearmssp.com/help-desk)
    - [Managed Services](https://blackbearmssp.com/managed-services)
    - [Data Backup and Recovery](https://blackbearmssp.com/data-backup-and-recovery)
    - [Network Security](https://blackbearmssp.com/network-security)
    - [Email Security](https://blackbearmssp.com/email-security)
    - [Cybersecurity](https://blackbearmssp.com/cyber-security)
    - [Encryption](https://blackbearmssp.com/encryption)
    - [Phishing as a Service](https://blackbearmssp.com/phishing)
    - [Dark Web Searches](https://blackbearmssp.com/darkweb-search)
    - [HIPAA and Regulatory Compliance](https://blackbearmssp.com/hipaa-consulting-and-compliance)
    - [Cloud Computing](https://blackbearmssp.com/cloud-computing)
    - [Cybersecurity Training](https://blackbearmssp.com/cyber-training)
- Content and Extras
  
  Show submenu for Content and Extras 
  
    - [The Ultimate Guide to Ransomware](https://blackbearmssp.com/ransomware-guide)
    - [The Ultimate Guide to Phishing](https://blackbearmssp.com/land-phishing)
    - [The Dark Web Explained](https://blackbearmssp.com/land-darkweb)
    - [The Guide to HIPAA Compliance](https://blackbearmssp.com/land-hipaa)
    - [Blogs](https://blackbearmssp.com/blogs)
    - [Free Dark Web Scan](https://blackbearmssp.com/dark-web-scan-0)
- [About](https://blackbearmssp.com/about)
- [Referral Program](https://blackbearmssp.com/referral-program)
- [Contact us](https://22807169.hs-sites.com/contact)

[Contact us](https://22807169.hs-sites.com/contact)

[All posts](https://blackbearmssp.com/blogs/all)

 September 18, 2024

# RansomHub Strikes Again

![Picture of Michael Cullen](https://blackbearmssp.com/hs-fs/hubfs/profile.jpeg?width=50&name=profile.jpeg) By  [Michael Cullen](https://blackbearmssp.com/blogs/author/michael-cullen)  ·   1 minute read

 

 

 

Download my [Ultimate Guide to Ransomware](https://blackbearmssp.com/ransomware) NOW!

## 𝗥𝗮𝗻𝘀𝗼𝗺𝗛𝘂𝗯 𝗦𝘁𝗿𝗶𝗸𝗲𝘀 𝗔𝗴𝗮𝗶𝗻: 𝗧𝘄𝗼 𝗛𝗶𝗴𝗵-𝗣𝗿𝗼𝗳𝗶𝗹𝗲 𝗧𝗮𝗿𝗴𝗲𝘁𝘀 𝗙𝗮𝗹𝗹 𝗩𝗶𝗰𝘁𝗶𝗺 𝘁𝗼 𝗦𝗼𝗽𝗵𝗶𝘀𝘁𝗶𝗰𝗮𝘁𝗲𝗱 𝗥𝗮𝗻𝘀𝗼𝗺𝘄𝗮𝗿𝗲 𝗔𝘁𝘁𝗮𝗰𝗸

**From the Desk of Black Bear MSSP**

In recent weeks, two prominent institutions have fallen prey to a devastating ransomware attack carried out by the notorious group, RansomHub. Millinocket Regional Hospital in Maine and Cardiology of Virginia are the latest casualties in a growing list of high-profile targets that have been exploited by this sophisticated threat actor.

 

𝗠𝗶𝗹𝗹𝗶𝗻𝗼𝗰𝗸𝗲𝘁 𝗥𝗲𝗴𝗶𝗼𝗻𝗮𝗹 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹: 𝗔 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗔𝗰𝗰𝗲𝘀𝘀 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹 𝘄𝗶𝘁𝗵 𝗦𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝗗𝗮𝘁𝗮 𝗮𝘁 𝗥𝗶𝘀𝗸

 

On July 26, 2024, Millinocket Regional Hospital was targeted by RansomHub, who claimed to have exfiltrated 10 GB of sensitive data from the hospital's systems. The attackers' primary vector is believed to be phishing emails or exploiting unpatched software vulnerabilities.

 

𝗧𝗵𝗲 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱 𝗱𝗮𝘁𝗮 𝗶𝗻𝗰𝗹𝘂𝗱𝗲𝘀:

 

Names

Addresses

Social Security numbers

Medical treatments

Health insurance information

 

𝗖𝗮𝗿𝗱𝗶𝗼𝗹𝗼𝗴𝘆 𝗼𝗳 𝗩𝗶𝗿𝗴𝗶𝗻𝗶𝗮: 𝗔 𝗧𝗮𝗿𝗴𝗲𝘁 𝗳𝗼𝗿 𝗥𝗮𝗻𝘀𝗼𝗺𝗛𝘂𝗯'𝘀 𝗦𝗼𝗽𝗵𝗶𝘀𝘁𝗶𝗰𝗮𝘁𝗲𝗱 𝗔𝗽𝗽𝗿𝗼𝗮𝗰𝗵

 

In a separate incident, Cardiology of Virginia was hit by RansomHub in September 2024. The exact threat vector used is still unknown, but the attack suggests that the group has refined its tactics to bypass traditional security measures.

 

𝗧𝗵𝗲 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱 𝗱𝗮𝘁𝗮 𝗶𝗻𝗰𝗹𝘂𝗱𝗲𝘀:

 

Client information (no further details available)

 

𝗪𝗵𝗮𝘁 𝗖𝗮𝗻 𝗣𝗮𝘁𝗶𝗲𝗻𝘁𝘀 𝗗𝗼 𝗜𝗳 𝗧𝗵𝗲𝘆 𝗦𝘂𝘀𝗽𝗲𝗰𝘁 𝗧𝗵𝗲𝗶𝗿 𝗣𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗪𝗮𝘀 𝗖𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱?

 

If you suspect your personal information was compromised in either of these incidents, it's essential to take immediate action. Here are some steps you can follow:

 

Monitor Your Credit Reports : Keep a close eye on your credit reports and statements for any suspicious activity.

 

Contact the Hospital or Cardiology Clinic : Reach out to Millinocket Regional Hospital or Cardiology of Virginia directly to inquire about the status of their investigation and what steps they are taking to protect patient data.

 

Report Any Incidents : If you notice any unusual transactions or discrepancies on your accounts, report them to the relevant authorities immediately.

 

𝗧𝗵𝗲 𝗚𝗿𝗼𝘄𝗶𝗻𝗴 𝗧𝗵𝗿𝗲𝗮𝘁 𝗼𝗳 𝗥𝗮𝗻𝘀𝗼𝗺𝗛𝘂𝗯: 𝗪𝗵𝗮𝘁 𝗪𝗲 𝗞𝗻𝗼𝘄 𝗦𝗼 𝗙𝗮𝗿

 

RansomHub is a relatively new ransomware group believed to have roots in Russia. They operate as a Ransomware-as-a-Service (RaaS) group, where affiliates receive 80% of the ransom paid by victims, while the group takes 20%. This business model makes it more challenging for law enforcement and cybersecurity experts to track down the perpetrators.

 

Download my guide on ransomware protection:

 

[The Ultimate Guide to Ransomware](https://blackbearmssp.com/ransomware)

 

Stay informed, stay safe!

Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://blackbearmssp.com/blogs/ransomhub) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://blackbearmssp.com/blogs/ransomhub) [twitter icon](https://twitter.com/intent/tweet?url=https://blackbearmssp.com/blogs/ransomhub) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://blackbearmssp.com/blogs/ransomhub) [envelope icon](mailto:?body=https://blackbearmssp.com/blogs/ransomhub)

## Related posts

[![](https://blackbearmssp.com/hubfs/hipaa106k.png)](https://blackbearmssp.com/blogs/hipaa-breach106k)

[cybersecurity](https://blackbearmssp.com/blogs/tag/cybersecurity)

### [106k HIPAA Records Breach](https://blackbearmssp.com/blogs/hipaa-breach106k)

[![](https://blackbearmssp.com/hubfs/ChatGPT%20Image%20Jun%202%2c%202025%2c%2004_44_35%20PM.png)](https://blackbearmssp.com/blogs/parkinsons)

[information technology](https://blackbearmssp.com/blogs/tag/information-technology)

### [Diagnose Parkinson’s with a pen??](https://blackbearmssp.com/blogs/parkinsons)

[![](https://blackbearmssp.com/hubfs/ChatGPT%20Image%20May%2016%2c%202025%2c%2003_21_36%20PM.png)](https://blackbearmssp.com/blogs/hipaa-breaches)

[cybersecurity](https://blackbearmssp.com/blogs/tag/cybersecurity)

### [New HIPAA Breaches](https://blackbearmssp.com/blogs/hipaa-breaches)

#### About Black Bear MSSP

Black Bear MSSP offers a host of services including Cybersecurity, Regulatory Compliance, IT support, help desk, ransomware protection and backup and disaster recovery services for US based businesses.

#### Quick Links

[Home](https://22807169.hs-sites.com/home)  
[About](https://black-bear-mssp-llc-22807169.hubspotpagebuilder.com/about)  
[Referral Program](https://black-bear-mssp-llc-22807169.hubspotpagebuilder.com/referral-program)  
[Contact](https://black-bear-mssp-llc-22807169.hubspotpagebuilder.com/contact)

#### Contact Info

Black Bear MSSP  
651 N Broad St, Suite 201  
Middletown, DE 19709

Phone: 732-226-2719  
Email: info@blackbearmssp.com

#### Social Media

 

[facebook-f icon](https://www.facebook.com/profile.php?id=100088972617215) [twitter icon](https://twitter.com/BlackBearCyber) [linkedin-in icon](https://www.linkedin.com/company/black-bear-technology/) [youtube icon](https://www.youtube.com/channel/UCRfzrs9vFf-vwcO9bbqYUMg)

Copyright ©  2023 Black Bear Technology, LLC. All right reserved.

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Michael Cullen",
    "url" : "https://blackbearmssp.com/blogs/author/michael-cullen"
  },
  "dateModified" : "2024-09-18T10:31:30.322Z",
  "datePublished" : "2024-09-18T10:31:30.000Z",
  "headline" : "RansomHub Strikes Again",
  "image" : [ "https://blackbearmssp.com/hubfs/ransomhub.webp" ],
  "mainEntityOfPage" : {
    "@id" : "https://blackbearmssp.com/blogs/ransomhub",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    }
  }
}
```

```json
{
        "@context" : "http://schema.org",
        "@type" : "Article",
        "headline" : "RansomHub Strikes Again",
        "image": "https://22807169.fs1.hubspotusercontent-na1.net/hubfs/22807169/ransomhub.webp",
        "author": {
          "@type": "Person",
          "name": ["Michael Cullen"],
          "url": "https://blackbearmssp.com/blogs/author/michael-cullen"
        },
        "publisher": {
          "@type": "Organization",
          "name": "Black Bear MSSP, LLC",
          "logo": {
            "@type": "ImageObject",
            "url": ""
          }
        },
        "description": "Image of a hacker in a hoodie, sitting at a computer, surrounded by code and screens displaying sensitive patient information. Background image of a hospital room with patients' names and medical records on the bedside tables.

Hashtags: #RansomHub #CyberAttack #PatientData #HealthcareSecurity #Hacking",  
        "datePublished": "2024-09-18T10:31:30+0000", 
        "url" : "https://blackbearmssp.com/blogs/ransomhub"
      }
```