A ransomware group known as Embargo has extorted millions of dollars from victims in the USA, including hospitals, according to research from blockchain intelligence firm TRM Labs.
Embargo, which operates under a ransomware-as-a-service model, emerged in April 2024 and has since been tied to an estimated $34.2 million in cryptocurrency transactions.
Most victims are in the healthcare, business services and manufacturing sectors, with some ransom demands reaching $1.3 million.
Notable US victims include American Associated Pharmacies, Memorial Hospital and Manor in Bainbridge, Ga., and Weiser Memorial Hospital in Weiser, Idaho. The group disproportionately targets US organisations, TRM Labs said, likely because they are seen as more able to pay large ransoms.
Healthcare organisations are particularly attractive targets because operational disruptions can affect patient care, according to TRM Labs.
Source: Becker's Health IT, 11 August 2025
Recommended Comments
Create an account or sign in to comment