In a recent ransomware attack, New York Blood Center Enterprises (NYBCe), a prominent blood supply organization serving multiple states, has experienced significant disruptions. This incident has affected blood donation and distribution activities just days after the organization declared a blood shortage emergency in the region. The attack is part of a troubling trend of cybercriminals targeting blood supply chains, highlighting the vulnerabilities within the healthcare sector’s IT systems.

The suspicious activity was detected on NYBCe’s IT systems last Sunday, and third-party cybersecurity experts confirmed it was a ransomware attack. Immediate measures were taken to contain the threat, and efforts are ongoing to restore systems with external cyber experts’ assistance. Law enforcement has been notified, and the organization remains in close communication with its hospital partners to mitigate the impact of the disruption.

NYBCe is a significant nonprofit blood collection and distribution entity in the U.S., impacting hospitals across New York, New Jersey, Connecticut, Delaware, Rhode Island, Nebraska, and Missouri. The organization is actively working on identifying any sensitive personal information that may have been compromised and will notify affected individuals per legal requirements. Details about the specific cybercriminal gang involved are yet to be disclosed.

This attack follows several similar incidents affecting blood supply entities in the U.S. and abroad, including disruptions caused by ransomware on Florida-based OneBlood and the Swiss-owned Octapharma Plasma in April. These attacks have commonly been linked to Russian-speaking ransomware groups, emphasizing the need for enhanced cybersecurity measures across the healthcare sector.

Experts stress the importance of robust cybersecurity defenses and contingency plans to ensure continuity in critical services like blood supply. Organizations are encouraged to diversify their suppliers and develop comprehensive recovery strategies to withstand potential cyber threats. Transparency and collaboration with federal authorities and cybersecurity organizations are crucial to preventing future attacks and safeguarding healthcare infrastructure.