FBI: RansomHub ransomware breached 210 victims since February

Since February 2024 the RansomHub RaaS operation has breached and exfiltrated data from over 200 victims across critical U.S. infrastructure sectors, conducting double‑extortion attacks and leaking stolen data when ransoms are not paid. A joint advisory from FBI, CISA, MS‑ISAC, and HHS details the group's TTPs, provides IOCs and mitigation recommendations, and calls out high‑profile victims including Patelco, Rite Aid, Christie’s, Frontier, Halliburton, and leaked Change Healthcare data.