German police arrest Russian Qilin ransomware suspect 'Vladimir K', linked to 2024 Synnovis attack that contributed to a patient's death
A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and the June 2024 attack on NHS pathology provider Synnovis, which disrupted London hospitals. A King's College Hospital NHS Foundation Trust probe found that a patient died in part because blood test results were delayed. British police are reportedly assessing whether their own inquiry could lead to an unlawful killing charge.
Detalhes técnicos
- Germany's original case concerns a September 2024 attack on a logistics firm, in which about US $160,000 in cryptocurrency was extorted.
- The June 2024 Qilin attack crippled Synnovis IT systems, caused a critical shortage of O-type blood, and led to cancelled operations and outpatient appointments.
- Synnovis did not pay a ransom, a decision taken jointly with the NHS trusts it serves.
- Qilin is a ransomware-as-a-service (RaaS) operation active since at least 2022. It has reportedly compromised more than 4,000 organisations and extorted over US $140 million.
- High-profile victims include Japanese brewer Asahi, where data of more than 1.5 million customers and about 275,000 current and former employees and their families may have been exposed.
- The article cites a 2020 attack on a Düsseldorf hospital as an earlier case where ransomware disruption was linked to a death.
Linha do tempo
-
German police arrest Russian Qilin ransomware suspect 'Vladimir K', linked to 2024 Synnovis attack that contributed to a patient's death
ler a análise desta fonte ocultar
A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and the June 2024 attack on NHS pathology provider Synnovis, which disrupted London hospitals. A King's College Hospital NHS Foundation Trust probe found that a patient died in part because blood test results were delayed. British police are reportedly assessing whether their own inquiry could lead to an unlawful killing charge.
Technical Details
- Germany's original case concerns a September 2024 attack on a logistics firm, in which about US $160,000 in cryptocurrency was extorted.
- The June 2024 Qilin attack crippled Synnovis IT systems, caused a critical shortage of O-type blood, and led to cancelled operations and outpatient appointments.
- Synnovis did not pay a ransom, a decision taken jointly with the NHS trusts it serves.
- Qilin is a ransomware-as-a-service (RaaS) operation active since at least 2022. It has reportedly compromised more than 4,000 organisations and extorted over US $140 million.
- High-profile victims include Japanese brewer Asahi, where data of more than 1.5 million customers and about 275,000 current and former employees and their families may have been exposed.
- The article cites a 2020 attack on a Düsseldorf hospital as an earlier case where ransomware disruption was linked to a death.