I do ransomware response for really critical infrastructure - like electric power, water, transit systems, manufacturing, oil for a living. I have to be mostly be emotionally detached, even when lives are at risk - that's triage.

Sometimes, when nobody gets hurt I even raise an eyebrow or raise a glass at a new tactic. But let's make one thing clear:

If you ransom a children's cancer hospital, you are irredeemable scum. You know exactly what you're doing, and you chose to potentially delay or disrupt treatment for suffering little kids.

https://therecord.media/lurie-childrens-hospital-chicago-ransomware-rhysida?&web_view=true

Ransomware gang seeks $3.4 million after attacking children’s hospital

Lurie Children's Hospital in Chicago had announced a cybersecurity incident earlier this month. The attackers have claimed intrusions into more than a dozen other hospitals' networks.

People actually up in my thread like, "BuT Us HOSpiTAls R ProFITEEring" like both cannot be true, and like kids don't need chemo today.
I ain't got the time man, you don't come for kids around me.
@hacks4pancakes if the hospital system is profiteering and one is so inclined, they should lock up the PE firm's assets for ransom and leave the hospital out of it.
@wcbdata @hacks4pancakes exactly. If a hospital is profiteering, it’s because a PE firm is siphoning money off of desperate people’s care. *Those* fuckers have names and addresses and accounts. The patients and healthcare workers have nothing to do with this.
@hacks4pancakes Remarkable the depths of twisted logic needed to defend ransoming a children’s hospital. I don’t understand the mind that can reach that conclusion. It’s just unfathomable to me
@jjenkins101201 I'd do a lot to survive, but nothing like that.
@hacks4pancakes Same. Everyone should have their red line and it seems a lot of folks never got that memo.
@hacks4pancakes May they step on rusty nails, and die from the infection.

@hacks4pancakes +1

I want CxO's and CISO be forced to pay for the emergency datarecovery, restore and mitigation measures with their own personal money!
https://infosec.space/@kkarhan/112419987210524570

Kevin Karhan :verified: (@[email protected])

@[email protected] the problem is that those who are in charge (i.e. #CISO) and those that could've prevented that (basically all the CxO's) chose not to. And as long as ransoms get paid and #ITsec as well as #InfoSec is not being deemed critical, [shit will continue]( https://infosec.space/@kkarhan/112419956348096557 ). Thus I don't blame the patients that basically got taken as *remote hostages* but rather the people that made this shite possible to begin with and that refuse to take #consequences from anything like this happening - not only to themselves but like competitors...

Infosec.Space