Attacks on University of Vermont Medical Center and Businesses
Lincoln, Neb. – Vyacheslav Igorevich Penchukov, a Ukrainian man, has pleaded guilty to involvement in two separate malware schemes, including a cyberattack at the University of Vermont Medical Center in 2020. The attack temporarily shut down vital services, costing the center tens of millions of dollars, as reported by the U.S. Department of Justice.
Guilty Plea and Charges
Penckukov, also known as Vyacheslav Igoravich Andreev, pleaded guilty to one count of conspiracy to break U.S. anti-racketeering law and one count of conspiracy to commit wire fraud in a federal court in Nebraska on Thursday.
Details of the Schemes
According to federal prosecutors, Penchukov was involved in a racketeering enterprise that infected thousands of business computers with malicious software since May 2009. He later led a conspiracy that infected computers with new malware from at least November 2018 through February 2021, allowing other malicious software, like ransomware, to access the infected computers.
Impact on University of Vermont Medical Center
The cyberattack on the University of Vermont Medical Center in October 2020 left the institution unable to provide critical patient services for over two weeks, creating a risk of death or serious injury to patients. The attack cost the medical center an estimated $50 million in lost revenue, as per a hospital official in 2021, while the Department of Justice estimated losses at $30 million.
Arrest and Extradition
Penchukov, a former FBI cyber most-wanted fugitive, was arrested in Switzerland in 2022 and extradited to the United States the following year. He faces up to 20 years in prison on each count when sentenced on May 9.