insomnia

Insomnia operates as a highly targeted ransomware operation with 25 confirmed attacks this period, demonstrating exceptional focus on healthcare organizations alongside technology companies, primarily within the US, Singapore, and Brazil. The group's concentration on healthcare targets suggests they understand the sector's critical operational requirements and regulatory compliance pressures that make ransomware particularly disruptive. Their limited geographic footprint but high success rate indicates a preference for quality over quantity, likely operating with a small, highly skilled affiliate network rather than the broad recruitment approach used by larger RaaS platforms. The group's targeting methodology appears designed to maximize payment likelihood by focusing on organizations where operational downtime has immediate life-safety implications, making them willing to pay ransoms quickly rather than attempt lengthy recovery processes.