Hackers have turned their sights on one of the UK's most well-known health charities earlier this week, it has been revealed, in an attempt to extort money by locking their systems.
St John Ambulance, a charity that specialises in first aid delivery and training, said that on 2 July at 9.00am it was hit by a ransomware attack.
In a statement emailed to customers and posted to its website, the organisation said the incident only lasted an hour and while it was temporarily blocked from accessing certain booking information the charity is "confident that data has not been shared outside St John Ambulance".
"The only data that has been affected relates to our training course delivery. It does not cover supplies, events, ambulance operations, volunteering, volunteer, data, employee data, clinical data or patient data," it said.
It also told customers: "You don't need to take any immediate action. However, if you work for one of our corporate customers, please pass this email on to the person in your organisation who is responsible for data protection."
St John Ambulance also noted it's followed its legal obligation to inform the Information Commissioner's Office (ICO) and has also contacted the Charity Commission and the police.
Independent security analyst Graham Cluley said in a blog post: "My reading of this is that St John Ambulance did not have to pay hackers a ransom to recover access to the encrypted data, but instead were able to put in place emergency recovery plans to restore from unaffected backup systems. That's in marked contrast to ransomware attacks that have hit American cities in recent weeks which have resulted in extortionists being paid over a million dollars.
"The news that St John Ambulance had calmly resolved the incident within half an hour seems pretty impressive to me, and together with the transparency they show in their disclosure will hopefully reassure those who deal with the charity. If only all organisations and companies could put themselves in a recovery position so confidently."
-
Anthropic CEO Dario Amodei claimed AI would be writing 90% of code by this point – we're still a long way offNews In March, Anthropic CEO Dario Amodei claimed up to 90% of code would be written by AI within six months – his prediction hasn't quite come to fruition.
-
Veracode bolsters leadership team for next growth chapterNews The application security vendor has named Anthony Barkley as chief strategy officer and Diana Bushard as general counsel
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
