Threat actors targeting Healthcare

Part of Threatwake, a free morning threat-intelligence dashboard.

33 threat actor groups tracked in MITRE ATT&CK are documented as targeting healthcare, between them using 309 distinct ATT&CK techniques. 8 healthcare victims appear in the current ransomware leak-site feed.

Most-used ATT&CK techniques against healthcare

Threat actor groups

Ransomware groups currently hitting healthcare

8 victims claimed in the current feed.

Threat intelligence by sector

Actor and technique data is reference intelligence from MITRE ATT&CK v19.1 and the MISP galaxy — curated knowledge describing historically observed targeting, refreshed a few times a year. Ransomware and news are live feeds. Threatwake labels which is which throughout.