Healthcare ransomware and identity-led extortion rise

Health-ISAC reports a record 317 healthcare ransomware events in Q3 2026. ShinyHunters’ reported SaaS-focused model—credential and MFA theft, helpdesk abuse, and SSO pivots without encryption—highlights identity-led data theft alongside conventional ransomware.