# BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare – Krebs on Security

<https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/>

- Host: [krebsonsecurity.com](https://links.thingelstad.xyz/hosts/krebsonsecurity.com/)
- Saved: March 5, 2024 (2024-03-06T04:24:45Z)
- Record: https://links.thingelstad.xyz/links/9404b12caf01/
- JSON: https://links.thingelstad.xyz/links/9404b12caf01.json

## What Jamie wrote

This ransomware attack is a big deal, and interesting that they seem to have actually paid the ransom.

> On March 1, a cryptocurrency address that security researchers had already mapped to BlackCat received a single transaction worth approximately $22 million. On March 3, a BlackCat affiliate posted a complaint to the exclusive Russian-language ransomware forum **Ramp** saying that Change Healthcare had paid a $22 million ransom for a decryption key, and to prevent four terabytes of stolen data from being published online.

After paying the mess just gets worse. ☠️

## Facts

- Kind: [Page](https://links.thingelstad.xyz/kinds/page/)

## Appears in

- [WT279: Weekly Thing 279 / Nushell, BlackCat, Daemons](https://weekly.thingelstad.com/archive/279/), Notable

## Same host

- [Few Fortune 100 Firms List Security Pros in Their Executive Ranks – Krebs on Security](https://links.thingelstad.xyz/links/8d9303d9ab18/) (krebsonsecurity.com, July 26, 2023)
- [U.S. Internet Leaked Years of Internal, Customer Emails – Krebs on Security](https://links.thingelstad.xyz/links/b28371b5128f/) (krebsonsecurity.com, February 16, 2024)
- [Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers – Krebs on Security](https://links.thingelstad.xyz/links/d816205d3888/) (krebsonsecurity.com, April 11, 2024)
- [Stark Industries Solutions: An Iron Hammer in the Cloud – Krebs on Security](https://links.thingelstad.xyz/links/a7e7915b8b1e/) (krebsonsecurity.com, May 30, 2024)
- [The Global Surveillance Free-for-All in Mobile Ad Data – Krebs on Security](https://links.thingelstad.xyz/links/8fa75eda4085/) (krebsonsecurity.com, October 24, 2024)

## Saved the same week

- [iOS 17.4 Emoji Changelog](https://links.thingelstad.xyz/links/71a4a82aaca1/) (blog.emojipedia.org, March 5, 2024)
- [Kagi + Wolfram | Kagi Blog](https://links.thingelstad.xyz/links/26a0e2dd345b/) (blog.kagi.com, March 5, 2024)
- [The Hunt for the Missing Data Type](https://links.thingelstad.xyz/links/9e7e7ab57c51/) (hillelwayne.com, March 5, 2024)
- [How Did REST Come To Mean The Opposite of REST?](https://links.thingelstad.xyz/links/641ce22a5002/) (htmx.org, March 6, 2024)
- [Privacy First and Competition | Electronic Frontier Foundation](https://links.thingelstad.xyz/links/c5a568f4a29a/) (eff.org, March 6, 2024)

## Elsewhere

- Wayback Machine: https://web.archive.org/web/*/https://krebsonsecurity.com/2024/03/blackcat-ransomware-group-implodes-after-apparent-22m-ransom-payment-by-change-healthcare/