ALPHV
Security incidents tagged ALPHV. Newest first.
0 ALPHV incidents in the last 12 months
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 974
- Longest quiet run: 731 days (Oct 23–Oct 23)
Show 2 older incidents2 older incidents
February 2024 1
- CriticalNo fix needed
Change Healthcare ransomware attack (ALPHV/BlackCat)
The ALPHV/BlackCat ransomware gang got into UnitedHealth's Change Healthcare on 2024-02-12 using stolen credentials for a Citrix remote-access portal without multi-factor authentication, then deployed ransomware on 2024-02-21. Claims processing and pharmacy payments across the US health system were disrupted for weeks. By October 2024 Change Healthcare had sent about 100 million notices to individuals (later estimates were about 190 million people).
Change Healthcare (UnitedHealth Group / Optum)Closed Oct 22, 2024
September 2023 1
- HighNo fix needed
MGM Resorts and Caesars hit by Scattered Spider
Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.
MGM Resorts International; Caesars EntertainmentClosed Oct 5, 2023
