FBI: cybercriminals steal millions of dollars from medical organizations using payment processors

[ALBERT]

Using this method, attackers stole more than $ 4.6 million in 2022.


In its warning, the FBI describes in detail how hackers use payment processors from medical facilities to redirect payments to their bank accounts.

Artists use the methods of social engineering and publicly available personal identification information ( PII ) payment processor employees, impersonate them and gain access to files, medical portals, payment information and web - sites. Using the collected data, hackers hack the accounts of medical payment processors, after which they redirect payments to their accounts.

The FBI report reports several similar incidents:

• April 2022: hackers pretended to be employees of a large medical company that owns more than 175 medical facilities. Attackers changed the instructions of the automated clearing house ( ACH ) of one of the payment processors and redirected about $ 840,000 to their accounts.
• February 2022: intruders entered the systems of a large medical company and changed banking information about direct transfer from the hospital, as a result of which the attacker stole $ 3.1 million.
• February 2022: attackers used the same strategy and stole about $ 700,000.