Ransomware attacks are rapidly rising globally. A new study reveals a significant surge from July 2022 to June 2023, with the United States being the primary target of these attacks. 

(Photo : ROB ENGELAAR/ANP/AFP via Getty Images)
A laptop displays a message after being infected by a ransomware as part of a worldwide cyberattack on June 27, 2017 in Geldrop. 

US as Primary Target of Cyberattacks

Out of the 1,900 reported ransomware incidents analyzed, a report from Malwarebytes said over 43 percent were traced back to the US, marking a troubling 75 percent increase compared to the previous year's figures, according to Engadget.

Alarmingly, the organization noted that the healthcare and educational sectors bore the brunt of these cyberattacks, with examples such as the breach at dental insurer Managed Care of North America (MCNA) in March and the cyberattack on the New York City Department of Education in June.

In addition to the US, the study also showed that Germany, France, and the UK also witnessed a rise in ransomware attacks, though at a comparatively lower rate. 

The report highlighted that 48 distinct ransomware groups targeted various American companies, government entities, and everyday consumers during the mentioned timeframe. 

The largest cyberattack on a US hospital system since last year has resulted in the disabling of 16 hospitals and over a hundred other medical facilities across the country. 

While the US faced significant cyber threats, other countries also encountered concerning trends. France witnessed a doubling of ransomware attacks in the past year, mainly targeting governmental institutions. 

The UK also experienced a striking surge, with 200 attacks originating from 32 distinct groups, a sharp increase from the previous year when they reported only one attack per month. 

The frequency rose significantly to eight attacks per month in the most recent year, underscoring the growing cyber threat landscape in the UK.

Also Read: Russia-Backed Hackers Posing as Microsoft Teams Target Global Orgs, Government Agencies

Affecting US Hospitals

Prospect Medical Holdings has recently been targeted in a ransomware attack. In response, the company took its main computer network offline on Thursday and later extended this action to its national computer systems. 

This incident has forced doctors and nurses to resort to traditional methods, such as using pen and paper to record patient information, instead of relying on computers.

The Guardian reported that cyberattacks had rendered several hospitals and medical facilities in the US inoperative on Thursday, affecting the normal functioning of medical services and prompting healthcare providers to find alternative ways to manage patient records. 

Due to the cyberattacks, several outpatient facilities, including radiology, diagnostic, and heart health centers in Connecticut, have been forced to shut down. 

According to Allan Liska, a ransomware analyst at cybersecurity firm Recorded Future, the recent hack on Prospect Medical is the 157th cyberattack targeting a US healthcare organization this year. 

It is reportedly the most significant attack since October 2021, when CommonSpirit Health, a chain comprising over 140 hospitals, had to suspend computer operations nationwide due to a ransomware attack.

In June, it was reported that several US agencies, including the Department of Energy, were hit in a hacking spree by Russian cybercriminals. This attack affected not only public institutions, but also private companies across the country.

Related Article: Computer Scientists Develop New Technique to Thwart Common Internet Attack