Universal Health Services (UHS) was hit by ransomware on Sunday, shutting down systems at hospitals in California, Florida, Texas, Arizona, and Washington, D.C. The impacted hospitals have been required to redirect ambulances and move patients needing surgery to other hospitals.
- UHS operates more than 400 healthcare facilities in the U.S. and U.K, has more than 90,000 employees, and serves 3.5 million patients per year.
- One UHS employee posted on Reddit that the hospital's antivirus programs were disabled, the hard drives "lit up with activity," and the computers logged out and shut down and could not be restarted.
- A number of employees told Bleeping Computer that the attackers appear to be the Ryuk ransomware group based on file extensions and the ransom note.