Ransomware needs a way in. Stolen credentials are the cheapest one.
Virginia Urology Ransomware Attack
uro.comRansomed
Overview
View group profileDomain
uro.com
Industry
Healthcare
Country
Germany
Discovered
10 months ago
Attack date
Dec 18, 2025
Confidence
85%
Severity
Medium
Status
Claimed
Threat group
ms13089Total victims
9
First seen
Dec 2025
Last seen
Aug 2026
Group status
active
Sophistication
0
Impact score
36
Threat level
2/10Aggressiveness2/10
Lethality0/10
Criticality4.2/10
Status breakdown
Claimed
this victim
100.0%9Victim's position within group
Industry
Healthcare
Known target sector
Country
Germany
Frequently targeted country
Other victims
View all (9)Same group · ms13089
Group activity
Monthly attacks · ms13089
9
total · avg 2.3/mo