Blackcat may be gone, but recovery from its attacks is not over

Following law enforcement disruption and a suspected exit scam of the AlphV/BlackCat ransomware group, earlier intrusions continue to impact victims; Highland Health Systems disclosed that a July 2023 incident attributed to BlackCat affected 83,543 individuals, exposing combinations of sensitive PII/PHI (e.g., SSNs, payment card data and PINs, medical and insurance info, driver’s license, and credentials). Notifications were sent nearly a year later, and while no misuse is known, the current disposition of the exfiltrated data remains unclear.