Daixin Team is a ransomware and data extortion group targeting the US healthcare sector.
Daixin Team is a ransomware and data extortion group active since at least June 2022, targeting exclusively the US Healthcare and Public Health sector. They encrypt EHR and diagnostic systems and exfiltrate patient data to pressure victims into paying ransoms. Defenders in healthcare organizations should focus on securing remote access points, maintaining and protecting offline backups, and closely monitoring for data exfiltration activities.
Daixin Team is a ransomware and data extortion group active since at least June 2022, exclusively targeting the US Healthcare and Public Health sector by encrypting EHR and diagnostic systems and exfiltrating patient data to pressure victims into paying ransoms.
Daixin Team targets exclusively the US Healthcare and Public Health sector.
Healthcare organizations should focus on securing remote access points, maintaining and protecting offline backups, and closely monitoring for data exfiltration activities.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.