SickKids acknowledged the assertion on Sunday and said it was working with outside security experts to “verify and assess the use of the decryptor,” adding that no ransom payments had been received. The hospital also stated that it had recently regained access to roughly 60% of its priority system. It’s unclear why the LockBit gang waited nearly two weeks to offer assistance to SickKids if the attack violated its code. It’s also worth noting that the gang has a track record of targeting hospitals and failing to deliver a decryptor. For example, earlier this year, the gang demanded a $1 million ransom from the Center Hospitalier Sud Francilien in France, and after the hospital refused to pay, the group leaked patient data.
