Massive Ransomware Attack Targets Healthcare Sector, Compromising Patient Data

• •Over 1 million patient records compromised in a ransomware attack on healthcare organizations.
• •Attackers exploited CVE-2026-0456 in hospital management software to gain access.
• •FBI advises immediate cybersecurity measures for healthcare entities amid ongoing investigations.

On March 10, 2026, a coordinated ransomware attack struck multiple healthcare organizations across the United States, impacting over 1 million patient records. The attackers utilized a sophisticated variant of the 'Revil' ransomware, exploiting CVE-2026-0456, a critical vulnerability in widely used hospital management software. The attack disrupted medical services in several hospitals, leading to emergency protocols being activated. Initial investigations suggest that the attackers gained access through phishing emails targeting administrative staff. The FBI has issued a warning, advising healthcare entities to bolster their cybersecurity measures. As of now, the attackers have demanded a ransom of $5 million in cryptocurrency. Law enforcement agencies are working with affected organizations to mitigate the damage and restore services. Affected systems include electronic health records and billing systems, which are crucial for patient care and operations.