StatMedPlus LLC
November 23, 2025
•[ ransomware, healthcare ]
StatMedPlus LLC was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-11-23. Sector: Healthcare. Country: United States of America. Website: statmedplus.com. StatMedPlus LLC is located at 22 Jericho Turnpike in Mineola, New York 11501.
Columbia Medical Practice
November 25, 2025
•[ ransomware, healthcare ]
Columbia Medical Practice was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: www.cmpractice.com.
Inspire Communities
November 25, 2025
•[ ransomware, healthcare ]
Inspire Communities was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-25. Sector: Healthcare. Country: United States of America. Website: inspirecommunities.com.
AllerVie Health
November 26, 2025
•[ ransomware, healthcare ]
AllerVie Health was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Healthcare. Country: United States of America. Website: allervie.com. Major customer database leak.
BioPharma Services
November 19, 2025
•[ ransomware, healthcare ]
BioPharma Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Healthcare. Country: Canada. Website: www.biopharmaservices.com.
ITL Systemhaus
November 26, 2025
•[ ransomware, technology, healthcare ]
ITL Systemhaus was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Technology. Country: Germany. Website: itl-edv.de. The company ITL Systemhaus fr Datentechnik GmbH was founded in 1991.
In the meantime, ITL has over 25 employees at a high level of training and offers a comprehensive range of services as a competent partner "around IT". The business policy is based on a long-term, partner-oriented relationship with the end customer.
Milestones in the history of ITL were the move to the new office building in Mnchberg with its own training rooms in 2005 and the complete takeover of the dental software DENTIXsoft with over 300 customers nationwide in 2010.
Zoetis
November 6, 2025
•[ ransomware, healthcare, manufacturing ]
Zoetis was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-11-06. Sector: Healthcare. Country: United States of America. Website: zoetis.com. Zoetis discovers, develops, manufactures, and commercializes anim
al health medicines, vaccines, and diagnostic products in the Uni
ted States and internationally.
We will upload 25gb of corporate documents soon. Lots of internal
documents, clients' data, numerous test and other information.
sevci.org
November 26, 2025
•[ ransomware, healthcare ]
sevci.org was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Healthcare. Country: Cte dIvoire. Website: sevci.org. Data size claimed by the group: 500 GB. Sant, Espoir et Vie, dans un systme de soin fort
Mid South Pulmonary & Sleep Specialists
November 28, 2025
•[ ransomware, healthcare ]
Mid South Pulmonary & Sleep Specialists was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2025-11-28. Sector: Healthcare. Country: United States of America. Website: mspulmonary.com. Patient data breach.
Devereux Advanced Behavioral Health
November 28, 2025
•[ ransomware, healthcare ]
Devereux Advanced Behavioral Health was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-11-28. Sector: Healthcare. Country: United States of America. Website: www.devereux.org. www.devereux.org https://www.zoominfo.com/c/the-devereux-foundation/60082215 Devereux Advanced Behavioral Health, headquartered in Villanova, Pennsylvania, is a behavioral healthcare organization that operates a network of clinical, therapeutic, educational, and employment programs.
Sharecare
August 12, 2026
•[ leak, healthcare, technology ]
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers).
Medela
September 7, 2026
•[ ransomware, healthcare, leak ]
In September 2026, Swiss medical device company Medela was the target of a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published publicly and included 424k unique email addresses belonging predominantly to healthcare professionals, Medela staff and leads. The exposed data consisted primarily of corporate contact information, including names, physical addresses and phone numbers, with some records also containing associated support tickets.
Alcon
August 1, 2026
•[ ransomware, leak, healthcare ]
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
Exact Sciences
July 15, 2026
•[ leak, healthcare, technology ]
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.
Tampa Bay Dental Implants & Periodontics
January 19, 2026
•[ ransomware, electronic medical records, backup data ]
Tampa Bay Dental Implants & Periodontics identified a ransomware incident on January 19, 2026 affecting an internal legacy server containing backup electronic medical record data. The practice said it found no evidence of data exfiltration or misuse, but encryption of legacy system logs prevented it from forensically ruling out unauthorized access. The incident was reported to HHS OCR as affecting 6,400 individuals.
Singing River Health System
December 21, 2025
•[ unauthorized access, data breach, patient information ]
Singing River Health System discovered that an unauthorized party gained access to its computer network between December 19 and December 21, 2025. On February 10, 2026, SRHS learned that the unauthorized party had accessed files containing patient information, and on May 19, 2026 it began mailing notices to affected patients. SRHS also temporarily shut down select systems, including internet access and MyChart, as a defensive containment measure; public reporting did not confirm attacker-caused encryption or destructive disruption.
Caja de Seguro Social (CSS)
March 27, 2026
•[ unauthorized intrusion, data leak, medical records ]
Caja de Seguro Social (CSS), Panama's public social security and healthcare institution, reported a possible unauthorized intrusion on March 27, 2026 while stating that web services remained operational. The Gentlemen later claimed responsibility for the hack and alleged publication or sale of 3 TB of data, including medical histories, pension records, loan documents, signatures, phone numbers, and radiology files, with the group claiming the medical and pension databases covered 80% of Panama's population.
