PanamaTimes

Saturday, Jul 12, 2025

US Shuts Down Ransomware Group "Hive" That Extorted Over $100 Million

US Shuts Down Ransomware Group "Hive" That Extorted Over $100 Million

US Attorney General Merrick Garland said that US authorities working with German and Netherlands law enforcement took over Hive's website and servers after having infiltrated it for nearly seven months
The US Justice Department announced Thursday it had shut down the Hive ransomware operation, which had extorted more than $100 million from more than 1,500 victims worldwide.

US Attorney General Merrick Garland said that US authorities working with German and Netherlands law enforcement took over Hive's website and servers after having infiltrated it for nearly seven months.

The infiltration helped hundreds of companies avoid paying $130 million in extortion demands made after Hive hacked and froze their data systems.

Deputy Attorney General Lisa Monaco called the operation to infiltrate Hive a "21st-century cyber stakeout."

"We hacked the hackers," she said.

Hive operated as a ransomware service, meaning anyone could hire its software and other services to help hack into and lock down a target's IT systems, and to process payments. Hive and the client would share the profits from the extortion.

Since it first emerged in 2021 more than 1,500 companies and institutions have been hacked -- their IT systems or databases encrypted by Hive and backup deleted or rendered inaccessible.

The hackers would demand large payments, often in cryptocurrency, in exchange for freeing up the systems.

If victims refused to pay, Hive would publish confidential internal files and documents on the internet.

Victims included India's Tata Power, German retail giant Media Markt, Costa Rica's public health service, Indonesia's state gas company and multiple US hospital groups, according to cybersecurity advisors.

Early on Thursday, Hive's website on the dark web was frozen and a screen alternating in English and Russian said it had been taken over by the US Federal Bureau of Investigation.

US officials said that by breaking into Hive's dark-web site and collecting information, Justice authorities were able to obtain the digital keys necessary to unlock a victim's frozen data so that they were not forced to pay Hive.

This helped prevent a Texas school district, and Louisiana hospital, and an unnamed foods services company from having to pay millions of dollars in ransom after being hit by a Hive attack, for example, they said.

"For months, we helped victims defeat their attackers and deprived the Hive network of extortion profits," said Monaco.

US authorities would not say who is behind Hive or whether any arrests would accompany the shutdown of the operation, saying the investigation is ongoing.

The investigation involved the US FBI, the German Reutlingen Police Headquarters, the German Federal Criminal Police, the Netherlands National High Tech Crime Unit, and Europol.
Newsletter

Related Articles

PanamaTimes
0:00
0:00
Close
Biden’s Doctor Pleads the Fifth to Avoid Self-Incrimination on President’s Medical Fitness
US Imposes New Tariffs on Brazilian Exports Amid Political Tensions
U.S. Enacts Sweeping Tax and Spending Legislation Amid Trade Policy Shifts
AI Raises Alarms Over Long-Term Job Security
House Oversight Committee Subpoenas Former Jill Biden Aide Amid Investigation into Alleged Concealment of President Biden's Cognitive Health
OpenAI Secures Multimillion-Dollar AI Contracts with Pentagon, India, and Grab
Brazilian Congress Rejects Lula's Proposed Tax Increase on Financial Transactions
Landslide in Bello, Colombia, Results in Multiple Casualties
Papa Johns pizza surge near the Pentagon tipped off social media before Trump's decisive Iran strike
Juncker Criticizes EU Inaction on Trump Tariffs
Minnesota Lawmaker Melissa Hortman and Husband Killed in Targeted Attack; Senator John Hoffman and Wife Injured
Wreck of $17 Billion San José Galleon Identified Off Colombia After 300 Years
Sole Survivor of Air India Crash Recounts Escape
Coinbase CEO Warns Bitcoin Could Supplant US Dollar Amid Mounting National Debt
UK and EU Reach Agreement on Gibraltar's Schengen Integration
Israeli Finance Minister Imposes Banking Penalties on Palestinians
U.S. Inflation Rises to 2.4% in May Amid Trade Tensions
Trump's Policies Prompt Decline in Chinese Student Enrollment in U.S.
Global Oceans Near Record Temperatures as CO₂ Levels Climb
Trump Announces U.S.-China Trade Deal Covering Rare Earths
Smuggled U.S. Fuel Funds Mexican Cartels Amid Crackdown
Protests Erupt in Los Angeles with Symbolic Flag Burning
Trump Administration Issues New Travel Ban Targeting 12 Countries
Man Group Mandates Full-Time Office Return for Quantitative Analysts
JPMorgan Warns Analysts Against Accepting Future-Dated Job Offers
Builder.ai Faces Legal Scrutiny Amid Financial Misreporting Allegations
Japan Grapples with Rice Shortage Amid Soaring Prices
Goldman Sachs Reduces Risk Exposure Amid Market Volatility
HSBC Chairman Mark Tucker to Return to AIA as Non-Executive Chair
Israel Confirms Arming Gaza Clan to Counter Hamas Influence
Judge Blocks Trump's Ban on International Students at Harvard
Trump Proposes Travel Ban on 'Uncontrolled' Countries
Panama Port Owner Balances US-China Pressures
Trump Administration Accused of Obstructing Deportation Cases
Trump’s China Strategy Remains a Geopolitical Puzzle
Eurozone Inflation Falls Below ECB Target to 1.9%
Call for a New Chapter in Globalisation Emerges
Blackstone and Rivals Diverge on Private Equity Strategy
Mayor’s Security Officer Implicated | Shocking New Details Emerge in NYC Kidnapping Case
Bangkok Ranked World's Top City for Remote Work in 2025
Denmark Increases Retirement Age to 70, Setting a European Precedent
Netanyahu Accuses Western Leaders of 'Emboldening Hamas'
Escalating Trade Tensions and Market Reactions
OnlyFans Reportedly in Talks for $8 Billion Sale
JBS Gains Shareholder Approval for U.S. Stock Listing
Booz Allen Hamilton to Cut 2,500 Jobs Amid Federal Spending Reductions
Trump Signs Executive Orders to Accelerate Nuclear Energy Development
Harvard Temporarily Blocks Trump Administration's International Student Ban
Nippon Steel Forms Partnership with U.S. Steel, Headquarters to Remain in Pittsburgh
Trump Expands Tariff Threats to Apple and Samsung Devices
×