Ransomware gangs go after EMEA healthcare’s supply chain

Flare research documents a sustained wave of ransomware-driven data leaks and extortion against healthcare organizations across the EMEA region (2024–2026), showing 14 ransomware groups (including LockBit 3.0, ALPHV/BlackCat, Qilin, RansomHub, DragonForce and others) targeting hospitals, clinics, telemedicine providers, labs, pharmacies and supply-chain vendors; notable breaches include massive data claims (e.g., American Hospital Dubai, Change Healthcare) and high operational and financial impacts, while a rising actor (Kazu) demonstrates shifting targeting toward healthcare in additional regions.