RansomHub Group Disrupts Lower Sioux Indian Community with Ransomware Attack A ransomware attack targeting the Lower Sioux Indian Community’s Jackpot Junction casino has spread across the tribe’s network, crippling essential services. The incident, first reported on Tuesday, forced the shutdown of the tribe’s pharmacy, health center, and dental facilities, with disruptions beginning as early as March 27. The attack, attributed to the RansomHub ransomware group, has paralyzed operations at the casino and disrupted government and healthcare services. The tribe has enlisted external cybersecurity support to restore systems and has set up temporary phone lines for affected facilities. RansomHub, which recently targeted the Sault Ste. Marie Tribe of Chippewa Indians in Michigan, uses a tool called EDRKillShifter to disable security programs before deploying ransomware. The group’s ransomware-as-a-service model has gained notoriety, with affiliates leveraging its tools in attacks. Tribal casinos have become frequent ransomware targets, with successful attacks in 2021 hitting operations in Oklahoma, Idaho, and California. Beyond financial losses, these incidents risk exposing sensitive data and eroding trust. The Lower Sioux attack underscores the broader threat to critical tribal infrastructure, extending beyond gaming to healthcare and public services. The tribe continues to work toward full recovery while urging patience from the community.