Average ransom demands surge for healthcare ransomware attacks in 2026
Comparitech's Q1 2026 data shows ransomware groups are hitting healthcare less often but demanding exponentially more when they do.
2 min read
Dean Levitt
March 8, 2024
Hello world,
Today’s Paubox Weekly is 601 words - a 2 minute read.
Want to get this type of content delivered to your inbox every Friday? Subscribe to Paubox Weekly.

A Blackcat affiliate claiming responsibility for the Optum attack alleged that after Optum paid the ransom, BlackCat confiscated the funds and suspended their account.
The backstory: On February 21st, a cyberattack on Change Healthcare severely disrupted operations. The “notorious” ransomware group BlackCat was alleged to be behind the attack.
4TB of Optum data is still in the hands of cybercriminals

Paubox CEO Hoala Greevy caught up with Winston Berger of A Better Way over coffee last month in Berkeley.
The big picture: A Better Way empowers children and families to develop life skills and relationships that promote their emotional, educational, and economic well-being.
What we learned: Winston likes the "always on encryption feature" of Paubox.
Visiting customers is one of the best parts of the job

On February 14th, the HHS OCR issued two reports to Congress regarding HIPAA compliance and enforcement.
By the numbers:
"...healthcare systems should take note of these trends"

Hoala had an appointment today with his dentist and Paubox customer, Dr. David T. Ho, DDS.
What was said: “Everything is running seamlessly. We’re very happy. Beyond happy. ”
"Even when it's a visit to the dentist, I always learn something new"

Federal agencies have confirmed that healthcare organizations have been extensively targeted since the DOJ's operation against ALPHV Blackcat.
Going deeper: The Blackcat cyber counteroffensive is a series of coordinated cyberattacks on healthcare organizations worldwide believed to be led by a Russia-based ransomware group known as ALPHV Blackcat.
Claimed to have medical and insurance records

Houser LLP, a national law firm with offices in 11 states, recently announced a data breach impacting over 325,000 individuals.
What's next: The firm is now facing a class action lawsuit filed by an impacted individual who claims that Houser was negligent in securing data
The attacker promised they deleted the stolen data
Comparitech's Q1 2026 data shows ransomware groups are hitting healthcare less often but demanding exponentially more when they do.
Several federal agencies have warned about the escalating threat posed by the RansomHub ransomware group.
The Federal Bureau of Investigation (FBI) recently released a new flash alert addressing Ragnar Locker ransomware. Ragnar Locker is just one of...
Every Friday we bring you the most important news from Paubox. Our aim is to make you smarter, faster.