Andariel allegedly targeted a Colorado medical clinic as part of a North Korean Reconnaissance General Bureau-linked operation against U.S. healthcare organizations using Maui ransomware. The indictment described extortion of hospitals and health care providers, laundering of ransom payments, and reuse of the proceeds to lease servers for follow-on intrusions against defense, technology, government, manufacturing, and energy victims.