Fresenius Hit by Snake Ransomware Attack Amid Rising Healthcare Cyber Threats Fresenius, Europe’s largest private hospital operator and a leading global provider of dialysis products and services, has suffered a ransomware attack disrupting its technology systems. The Germany-based conglomerate, which employs nearly 300,000 people across over 100 countries, confirmed the incident on Tuesday, stating that while some operations were limited, patient care remained unaffected. The attack targeted Fresenius’ four independent business units: Fresenius Medical Care (a major kidney failure treatment provider), Fresenius Helios (Europe’s largest private hospital network), Fresenius Kabi (pharmaceuticals and medical devices), and Fresenius Vamed (healthcare facility management). The company holds nearly 40% of the U.S. dialysis market, a critical service as COVID-19 has increased demand due to kidney-related complications. A source familiar with the incident identified the ransomware strain as Snake, a relatively new variant known for targeting large enterprises and industrial control systems. Snake encrypts files and exfiltrates data before locking systems, giving victims 48 hours to pay a ransom or risk public exposure of stolen files. Fresenius has not disclosed whether it will pay the ransom, though a source claimed the company previously paid $1.5 million to resolve an earlier attack. The breach aligns with a surge in cyberattacks against healthcare providers during the pandemic. INTERPOL reported a sharp rise in ransomware incidents targeting medical organizations, while the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the U.K.’s National Cyber Security Centre warned of state-sponsored hacking groups exploiting COVID-19 response efforts. These actors seek intelligence on healthcare policies and research, as well as sensitive patient data. Fresenius has not provided further details on the attack, citing security protocols. The incident follows other recent healthcare breaches, including a late-April ransomware attack on Colorado’s Parkview Medical Center, which disabled patient record systems. Despite some ransomware groups pledging to avoid healthcare targets during the pandemic, attacks have persisted.

Fresenius, Europe’s largest private hospital operator and a major provider of dialysis products and services had been hit in a ransomware cyber attack on its technology systems. The incident limited some of its operations, but patient care continues. The company struggled with a computer virus outbreak.