Last Week in Ransomware: 12.02.2024

This briefing summarizes several recent high-impact ransomware events and trends: a November 21, 2024 supply-chain ransomware attack on Blue Yonder causing service disruption for major UK grocers, a UMC Health ransomware incident that resulted in PHI/PII exposure and operational diversion, a suspected ransomware outage at Wirral University Teaching Hospital forcing patients home, and Black Basta’s evolved social-engineering TTPs using Microsoft Teams to deploy remote-access tools and ransomware. The report highlights cascading supply-chain risk, healthcare operational and privacy impacts, exploited vulnerabilities and extortion tactics, and recommends stronger third-party risk management, network segmentation, and robust DFIR capabilities.