Ransomware gangs go after EMEA healthcare’s supply chain

Ransomware groups are increasingly targeting the broader healthcare supply chain across the EMEA region, according to a report by Flare researcher Assaf Morag. Between 2024 and 2026, multiple threat actors including Qilin, LockBit 3.0, RansomHub, DragonForce, Gunra, NightSpire, 3AM, and Kazu have been observed attacking not just hospitals but also clinics, telemedicine providers, diagnostic labs, pharmacies, and related service organizations. These attacks often serve as entry points to larger, better-protected targets further along the supply chain. The study highlights the growing risk to patient safety and operational continuity in the healthcare sector.