Healthcare organizations across the U.S. have been warned by the Department of Health and Human Services regarding Venus ransomware attacks following a recent intrusion against a healthcare provider, BleepingComputer reports.
Despite the attack, no data leak site for the Venus ransomware actors has been found so far, according to a report from the HHS' Health Sector Cybersecurity Coordination Center.
"HC3 is aware of at least one healthcare entity in the United States falling victim to Venus ransomware recently. The operators of Venus ransomware are not believed to operate as a ransomware-as-a-service (RaaS) model and no associated data leak site (DLS) exists at this time," said the report.
Dozens of corporations around the world have already been compromised by Venus ransomware since it's emergence in August. Publicly exposed Remote Desktop services have been hacked by the attackers to facilitate Windows device encryption.
The warning about Venus ransomware attacks against healthcare comes a month after the HHS, Cybersecurity and Infrastructure Security Agency, and FBI warned about Daixin Team ransomware attacks against the sector.
California's Tahoma County may have had its employees', service recipients', and affiliates' personally identifiable information compromised following a data breach of systems belonging to its Department of Social Services, which was identified on April 9 but was found to have occurred from Nov. 18, 2021 to April 9, 2022, according to SecurityWeek.