A Ukrainian national, Vyacheslav Igorevich Penchukov, has pleaded guilty to leading a cyberattack that severely impacted the University of Vermont Medical Center (UVM) Health Network in Burlington, Vermont, during the COVID-19 pandemic in 2020. The attack, which disrupted patient care for over two weeks, resulted in a loss of more than $30 million for the health system.
Penchukov, also known as Vyacheslav Igoravich Andreev and Tank, 37, from Donetsk, Ukraine, was at the helm of two notorious malware groups when the attack occurred, according to the Department of Justice (DOJ). These groups were responsible for stealing millions from their victims through sophisticated cyberattacks.
“Before his arrest and extradition to the United States, the defendant was a fugitive on the FBI’s most wanted list for nearly a decade,” stated Acting Assistant Attorney General Nicole M. Argentieri of the Justice Department’s Criminal Division. Penchukov’s criminal activities date back to May 2009 when he played a leading role in a racketeering enterprise that deployed the Zeus malware. This malicious software captured sensitive information such as bank account details and personal identification numbers from thousands of business computers, leading to unauthorized fund transfers and substantial financial losses for the victims.
The enterprise also utilized “money mules” in the U.S. and other countries to funnel the stolen funds overseas to accounts controlled by Penchukov’s co-conspirators. Despite being added to the FBI’s Cyber Most Wanted List, Penchukov continued his criminal endeavors by spearheading a conspiracy that spread the IcedID or Bokbot malware from November 2018 to February 2021. This malware collected personal information and provided access to infected computers for further malicious activities, including ransomware attacks.
The attack on UVM’s Health Network was one such instance where IcedID was used, crippling the medical center’s ability to provide critical patient services and posing a risk of death or serious bodily injury to patients. Penchukov was arrested in Switzerland in 2022 and extradited to the United States in 2023. He has pleaded guilty to one count of conspiracy to commit a racketeer influenced and corrupt organizations (RICO) act offense for his role in the Zeus enterprise, and one count of conspiracy to commit wire fraud for his involvement in the IcedID malware group.
Penchukov is scheduled to be sentenced on May 9 and faces a maximum penalty of 20 years in prison for each count. The final sentence will be determined by a federal judge, taking into account the U.S. Sentencing Guidelines and other statutory factors.
Impact of Cyberattacks
Cyberattacks are increasingly posing a significant threat to patient care in the healthcare sector, with a 2023 report highlighting the growing challenges and financial burdens faced by healthcare organizations. The study revealed that a staggering 88% of surveyed organizations encountered an average of 40 cyberattacks over the past year, with the average cost of each attack soaring to $4.99 million, marking a 13% increase from the previous year.
The report further emphasized the impact of the four most prevalent types of attacks – cloud compromise, ransomware, supply chain, and business email compromise (BEC) – on patient care. A concerning 66% of affected organizations reported disruptions to patient care, with 57% experiencing poor patient outcomes due to delayed procedures and tests. Additionally, 50% of the organizations observed an uptick in medical procedure complications, while 23% reported increased patient mortality rates.
According to a Claroty survey conducted in August 2023, a significant 78% of respondents faced at least one cybersecurity incident in the last year, affecting various assets such as IT systems, sensitive data, medical devices, and building management systems. The impact on care delivery was substantial, with over 60% of respondents noting a moderate to significant effect, and 15% reporting a severe impact that jeopardized patient health or safety. Financially, the majority of the costs associated with these incidents fell within the $100,000 to $1,000,000 range, and 26% of the organizations resorted to paying ransoms.
The increasing frequency and severity of cyberattacks in the healthcare sector underscore the urgent need for robust cybersecurity measures to protect patient data, ensure uninterrupted care, and mitigate financial losses.
To read more articles on cyberattacks and cybersecurity on Informessor, click here