EMBARGO Ransomware Group Strikes Ohio Non-Profit in Repeat Attack Anne Grady Services, an Ohio-based non-profit supporting individuals with intellectual and developmental disabilities, has fallen victim to the EMBARGO ransomware group, marking its second ransomware attack in recent history. The organization was previously targeted by RansomHub, another ransomware-as-a-service (RaaS) operation, raising concerns about the persistent vulnerability of non-profits to cyber threats. EMBARGO, a relatively new but rapidly evolving RaaS group that emerged in mid-2024, has gained attention for its Rust-based malware and advanced evasion techniques. The group employs custom tools like “MDeployer” and “MS4Killer” to disable endpoint detection systems and exploit Windows Safe Mode vulnerabilities, ensuring successful ransomware deployment. Unlike some ransomware groups that claim to avoid non-profits, EMBARGO has shown no such restraint, further highlighting the escalating audacity of cybercriminals. The attack on Anne Grady Services reflects a broader trend of ransomware groups targeting healthcare and social service organizations, which often lack robust cybersecurity defenses due to limited budgets. The incident underscores the growing sophistication of emerging RaaS operations, which draw inspiration from established groups like BlackCat and Hive. While RansomHub previously avoided re-targeting organizations that paid ransoms, EMBARGO’s attack demonstrates that no sector is off-limits. The breach poses significant risks, including operational disruption and potential exposure of sensitive data. As of now, Anne Grady Services has not disclosed whether it will negotiate with the attackers or involve law enforcement. The case serves as a stark example of the urgent need for proactive cybersecurity measures, particularly among high-risk but under-resourced organizations.