VSS Medical Technology

VSS Medical Technology operates as a healthcare technology firm. The organisation develops software, as evidenced by the theft of source code during a security incident. Its systems store and process protected health information and customer financial data. These data handling activities indicate involvement in the healthcare sector’s information technology needs. The firm provides technology solutions that support the management of sensitive health‑related data. Its operations are focused on delivering software and data services to healthcare stakeholders.

VSS Medical Technology has at least one subsidiary that was separately targeted in a ransomware attack. In March 2022, both the parent firm and its subsidiary experienced simultaneous ransomware attacks by two distinct threat actors. The subsidiary’s network was compromised for six months, during which 160 GB of files—including source code, customer financial data, and protected health information—were exfiltrated. One attacker encrypted critical files and received a negotiated ransom payment for decryption keys, while the other attacker’s demand was refused and resulted in the leak of corporate documents and tax records. The incident disrupted operations and exposed proprietary business information alongside some personal and protected client details.