md5
Attribution profile
- Type
- Criminal
- Location
- United States of America
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2022-07-26
- Last seen
- 2022-07-26
- Updated
- 2026-10-12 17:09
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor known by the alias md5 operates from the United States and has been observed conducting a ransomware attack against a healthcare organization, as demonstrated by the July 2022 breach of FMC Services in which unauthorized system access led to the exposure of personal and protected health information for approximately 233,948 individuals. The incident involved the deployment of ransomware to encrypt data and extort payment, indicating a financially motivated objective. No further details regarding specific malware families, initial‑access vectors, tooling preferences, affiliations, or additional campaigns are publicly available in the provided source material.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.