The US Department of Health and Human Services (HHS) and cybersecurity firms have increased vigilance due to threats by ransomware-as-a-service (RaaS) group, Rhysida. The group, which targets sectors such as education, government, and healthcare, deploys ransomware via phishing attacks and threatens to leak stolen data unless paid in Bitcoin. Recently, Rhysida led an attack against Prospect Medical Holdings, resulting in a major system outage affecting 16 hospitals.

55% of threat groups active in 2024 were financially motivated
In 2024, Mandiant reported that 55% of threat groups were financially motivated, showing an increase from the previous year.