Containment efforts are underway following the detection of a SnowCat-APT41 ransomware attack impacting 28 endpoints, including 11 servers and 17 workstations. Eight accounts have been compromised, and unauthorized access to customer data is suspected, beginning on January 28, 2026. The customer enrollment and benefits portal is currently unavailable, and customer services and sales applications are also down. Firewall blocks have been extended and 8 devices restored to full service.