Ransomware group hijacks hospital system’s Facebook page amid ongoing cyberattack fallout

Two weeks after a malware-driven cyberattack, AnMed health system continues to experience facility closures and reported that its Facebook page displayed ransom demands from the 'The Gentlemen' ransomware group, which claims to have exfiltrated 6 TB of sensitive patient data; the article details the group's prolific activity, affiliate-friendly fee structure, access methods (brute force, exploited vulnerabilities, purchased access), and tools to disable EDR, while noting AnMed has not confirmed the scope of any patient data impact.