2020 Universal Health Services — Ryuk-style ransomware; ~250 U.S. facilities IT outage; ~$67M impact
Data compromised
Company disclosures in the first wave emphasized operational disruption over confirmed record theft
Technical writeup
On 27 September 2020, UHS reported an IT security incident that led it to suspend U.S. clinical/business applications, driving offline documentation, care redirection, and prolonged revenue-cycle/billing impairment summarized in later SEC earnings commentary as on the order of $67 million pre-tax impact. Staff-reported `.ryk` file artifacts and notes matching Ryuk imagery circulated in trade press, while UHS maintained it saw no evidence that patient or employee data was misused. U.K. sites were described as unaffected in early coverage.
Root cause
Human-operated ransomware campaign (Ryuk attributed in specialist reporting; initial access often described as phishing paths in sector analysis)