Company #5
October 20, 2026
•[ ransomware, healthcare ]
Company #5 was listed as a victim on the leak site of the OBSOFT ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: South Korea. Website: www.mis****nho****al.co.kr. Status: Resolved
Data destoryed
Hydrogel Vision Corporation
November 2, 2026
•[ ransomware, leak, healthcare ]
Hydrogel Vision Corporation was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: United States of America. Website: www.hydrogelvision.com. Hydrogel Vision Corp. based in Sarasota, Florida was founded in May 2002 as an independent subsidiary of Benz Research and Development. The company was formed in order to market the Extreme H2O and Clarity H2O disposable lens lines worldwide.
Company #125
November 3, 2026
•[ ransomware, healthcare ]
Company #125 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-03. Country: United States of America. clinical-stage biopharmaceutical (oncology) United States | [PENDING EXPOSURE]
Company #126
November 3, 2026
•[ ransomware, healthcare ]
Company #126 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-03. pharmaceutical (biotechnology and specialty) Italy (United States data) | [PENDING EXPOSURE]
Vetstoria
November 3, 2026
•[ ransomware, healthcare, leak ]
Vetstoria was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Country: Sweden. Website: www.vetstoria.com. Veterinary Services Stolen data: 5 GB.
hillandbeyer.com
November 3, 2026
•[ ransomware, leak, healthcare ]
hillandbeyer.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Professional Services. Country: United States of America. Website: hillandbeyer.com. Hill & Beyer is a law firm that provides legal representation and related client services.
Management at Hill & Beyer has been officially informed regarding a major breach involving highly sensitive data.
The compromised file repository encompasses a broad spectrum of confidential documents, notably featuring private patient medical histories and health records, audio recordings alongside transcripts from 911 emergency dispatches, investigative files concerning legal infractions, and comprehensive logs and transcripts of formal interrogations.
Initially, an effort was made to resolve the matter privately and confidentially. Numerous phone calls, warnings, and formal notifications were dispatched to the organization's administration and leadership. However, management chose to disregard these warnings and severed all communication without implementing any remediation measures. Consequently, this public statement is being issued.
medinahealthcare.net
November 3, 2026
•[ ransomware, healthcare ]
medinahealthcare.net was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Website: medinahealthcare.net. Medina Healthcare System is a Texas-based healthcare provider offering hospital services, primary care, emergency treatment, and specialty medical services.
roundglass.com
November 3, 2026
•[ ransomware, healthcare ]
roundglass.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Country: United States of America. Website: roundglass.com. proof
Goldsmith & Hull
November 4, 2026
•[ ransomware, finance, healthcare ]
Goldsmith & Hull was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. The Law Offices of Goldsmith & Hull A.P.C. specializes in providing legal representation in various areas of law, including personal injury, medical malpractice, and insurance matters. They offer services such as collection, subrogation, and financial guarantee insurance, catering to both retail and commercial clients. The firm is experienced in handling cases in all Federal and State courts of California. Their intended clients include individuals seeking personal injury claims and Fortune 500 companies requiring collection services. Status: Not paid. Data publication: 2026-11-11 08:00 UTC. Revenue: $5M. Employees: 50. Data type: legal, personal, clientsData, confidential.
Palm Vascular Centers
November 2, 2026
•[ ransomware, healthcare ]
Palm Vascular Centers was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: United States of America. Website: palmvascular.com. A company specializing in collaboration with interventional radiologists and vascular surgeons
Juge, Napolitano, Ruli, Putfark & Pittman
November 4, 2026
•[ ransomware, leak, healthcare ]
Juge, Napolitano, Ruli, Putfark & Pittman was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie / Covington, LA, founded 1983) is one of the oldest workers' compensation defense law firms, protecting employers, insurers and TPAs against injured workers' claims.Clients (148 client-guideline files): Sedgwick, Gallagher Bassett, Broadspire/Crawford,ESIS/ACE, AIG, Allstate, Chubb, Zurich, Amazon, Walmart, Home Depot, CVS Health, FedEx, Lyft, Costco, Hilton, Northrop Grumman, State Farm,Travelers, Coca-Cola, Fluor, GEO Group, Archdiocese of New Orleans, the cities of New Orleans / Baton Rouge / Shreveport, and others.2,383,324 files, ~3.2 TB.- 4,477 full workers' comp defense case files: 175,993 PDFs, 73,239 DOCX, 61,622 DOC, 55,798 MSG emails, 28,244 TIF scans;- claimant medical imaging: 6,461 DICOM files (MRI/CT/X-ray);- 28,410 medical EOBs and disputed LDOL-WC-1008 claims (full PII + diagnoses of injured workers);- 1,884 new-file intake sheets with complete claimant PII (SSN, address, DOB, injury);- 3,265 counterparty W-9 forms (EINs, signatures, current 20242025);- 850 claimant surveillance videos ('Surveillance', 214 GB) - covert footage of injured workers;- inbound attorney-correspondence faxes, live ECF/PACER court logins, and 148 confidential insurer client guidelines. More
Company #130
November 4, 2026
•[ ransomware, healthcare, technology ]
Company #130 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-04. Country: United States of America. specialty pharma data analytics United States | [PENDING EXPOSURE]
fuss-sprunggelenk.de
November 4, 2026
•[ ransomware, healthcare ]
fuss-sprunggelenk.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Healthcare. Country: Germany. Website: fuss-sprunggelenk.de. The organization focuses on the diagnosis, treatment and surgical management of disorders affecting the foot, ankle joints and lower extremities.
ehrenwall.de
November 4, 2026
•[ ransomware, healthcare ]
ehrenwall.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other. Country: Germany. Website: ehrenwall.de. Founded in 1880, the institution has a long history of providing specialized psychiatric and psychological healthcare services. It focuses primarily
jhz-bernardshof.de
November 4, 2026
•[ ransomware, healthcare, leak ]
jhz-bernardshof.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Hospitality. Country: Germany. Website: jhz-bernardshof.de. Established in 1928, the organization provides residential, semi-residential and outpatient support services for children, adolescents and young adults who require
prospecthillcamberwell.com.au
November 4, 2026
•[ ransomware, healthcare ]
prospecthillcamberwell.com.au was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Other. Country: Australia. Website: prospecthillcamberwell.com.au. The organization provides residential accommodation and lifestyle services for older Australians seeking independent living in a secure and socially connected
parkell.com
November 4, 2026
•[ ransomware, healthcare, manufacturing ]
parkell.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Healthcare. Country: United States of America. Website: parkell.com. [AI generated] Parkell is a United States-based company specializing in the manufacture and distribution of dental equipment, materials, and supplies. Operating within the dental and healthcare products industry, it provides items such as dental curing lights, amalgamators, impression materials, and infection control products to dental professionals, laboratories, and practices. The company is headquartered in New York and primarily serves the North American dental market.
hamiltonhealthcenter.com
November 4, 2026
•[ ransomware, healthcare, leak ]
hamiltonhealthcenter.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Healthcare. Country: Canada. Website: hamiltonhealthcenter.com. [AI generated] N/A
I don't have verified, reliable information about a specific organization operating at "hamiltonhealthcenter.com." There are multiple healthcare facilities with similar names ("Hamilton Health Center," "Hamilton Health Centers," etc.) in different locations, and without confirmed details I cannot accurately report on its services, industry specifics, or country of operation without risking providing inaccurate information.
BCH
November 4, 2026
•[ ransomware, healthcare ]
BCH was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Operations of a residential care facility: daily operational reports (DOR) and daily service reports (DSR) for day and night shifts (2016-2026), incident and occurrence reports, staffing notes, and client-count records (up to 80 clients in house).
Hirschinjurylaw
November 4, 2026
•[ ransomware, healthcare ]
Hirschinjurylaw was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. Town Center Pharmacy is a retail pharmacy selling prescription and over-the-counter medicines. The company also handles medical billing and insurance payouts, including litigation/insurance documents.