Treasury sanctions VPN provider, individuals tied to hospital ransomw…

US Treasury sanctioned VPN provider 1VPNS and two individuals for supplying infrastructure used in ransomware attacks targeting US hospitals, financial services and municipal governments. The action follows a May 2026 law enforcement takedown and is coordinated with UK sanctions on related actors. If you sell infrastructure—VPN, proxies, hosting, or tooling—to customers you don't fully vet, you're now a sanctions target yourself. Hospitals are sanctioning your entire supply chain; the next wave will hit resellers and integrators.