MSSNY listed on Snatch ransomware leak site

• Ransomware group: Snatch
• Country: United States
• Sector: Healthcare
• Announcement date: May 22, 2023

Snatch ransomware group targets MSSNY

The Snatch ransomware group has officially listed the Medical Society of the State of New York (MSSNY) on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated data from the organization's systems.

This announcement, which appeared on the group's platform, marks a significant escalation in the threat landscape facing professional medical organizations. The claim suggests a targeted breach aimed at an entity central to the medical community in the United States.

Details of the claimed attack

The Snatch group announced the breach on May 22, 2023, claiming that they gained unauthorized access to the organization's internal systems. The group's announcement includes general information regarding the profile of the organization, but it does not provide a specific list of files or a detailed inventory regarding the allegedly exfiltrated data.

While the group has publicly claimed responsibility for the intrusion and the subsequent data breach, they have not provided any specific details or sample files that would clarify the exact nature of the information they claim to have stolen. The announcement remains focused on the claim of access rather than providing evidence of the stolen content.

Information regarding the data involved

Despite the group's claims of a successful data exfiltration, the announcement is notably lacking in specifics regarding the content of the breach. The listing names no specific data types or file categories that were allegedly taken from the organization's servers.

Potential risks of the breach

The potential exfiltration of data belonging to physicians and medical students could significantly increase the risk of identity theft or targeted phishing attacks against these members. Because the organization represents a large number of professionals, the impact of such a breach could extend to many individuals within the medical community.

About the Medical Society of the State of New York

The Medical Society of the State of New York (MSSNY) is a professional organization representing approximately 30,000 licensed physicians, medical residents, and medical students in New York State. The society operates to advocate for the professional interests of its members and support medical practice throughout the state.

Analysis and industry implications

The Snatch group is known to employ a specific method of rebooting systems into safe mode to perform encryption. This technique is designed to bypass certain security measures and can lead to significant disruptions in an organization's operational processes, potentially halting essential services and administrative functions.

Furthermore, the group's tendency to use double extortion methods creates additional pressure on the institution. Double extortion is a common ransomware tactic where attackers not only encrypt the victim's data to disrupt operations but also steal sensitive information to threaten the victim with public release unless a ransom is paid. This dual-threat approach increases the complexity of incident response and recovery.

As an organization operating in the healthcare sector, potential data breaches may trigger complex legal processes under regulations such as HIPAA. Organizations in this sector must navigate strict compliance requirements regarding the protection of sensitive information. To mitigate such risks, organizations typically focus on robust defensive measures, including regular security audits, employee training to prevent phishing, and maintaining offline backups to ensure operational continuity in the event of an encryption-based attack.