Case Study: a healthcare provider rebuilds after ransomware with Palo Alto Networks Unit 42

Healthcare Provider rebuilds after ransomware with Palo Alto Networks, restoring access and removing backdoors

The customer, a healthcare provider, faced a significant challenge when its entire environment and backups were locked by a BlackCat ransomware attack. It needed to rapidly investigate, recover its data, and rebuild its network to eliminate threat actor access. The healthcare provider engaged Palo Alto Networks and its Unit 42 Incident Response services for assistance.

Palo Alto Networks' Unit 42 team investigated the attack, helped the client negotiate with and pay the threat actor to restore access, and advised on a complete rebuild of the environment. This eliminated threat actor backdoors and resulted in a more resilient system. The client regained access to its data, and Palo Alto Networks' Cyber Risk Management team helped redesign its security policies and processes to be stronger against future attacks.