MRC Prion Unit and Institute of Prion Diseases
January 24, 2026
•[ ransomware, healthcare, education ]
MRC Prion Unit and Institute of Prion Diseases was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.ucl.ac.uk/brain-sciences/prion. According to our guidelines, full data will be released once the timer expires.
Cytek Biosciences
January 25, 2026
•[ ransomware, healthcare, technology ]
Cytek Biosciences was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Healthcare. Country: United States of America. Website: cytekbio.com. Cytek Biosciences Cytek Biosciences is a leading cell analysis solutions company founded in 1992 and headquartered in Fremont, California with global offices across North America, Europe, and Asia. Sold 0% All data was sold, stay with us, we will upload new Companies later More
EXCELAS1.COM
January 25, 2026
•[ ransomware, technology, healthcare ]
EXCELAS1.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Technology. Country: United States of America. Website: EXCELAS1.COM. [AI generated] Excelas1.com, also known as Excelas LLC, is a medical legal solutions company based in Cleveland, Ohio. They offer thorough medical record analysis and organization services to assist in complex medical-legal cases. Their specialized services aid attorneys, insurance companies, and healthcare establishments in making decisions. Their team of experienced professionals provides services such as Case Intake Triage, Medical Record Retrieval, and Chronology Creation among others.
zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics
January 26, 2026
•[ ransomware, technology, healthcare ]
zHealthEHR Practice Management Software for Chiropractic & Wellness Clinics was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Technology. Country: United States of America. Website: www.zhealthehr.com. Ransom demand: $500 000. Data size claimed by the group: 15 GB. zHealthEHR is a cloud-based electronic health record (EHR) and practice management platform built primarily for chiropractors and other wellness providers. It combines clinical documentation, appointment scheduling, patient intake, billing, payments, and automated reminders into a single system, helping small to mid-size practices streamline daily operations. The platform focuses on ease of use, customizable SOAP notes, and patient engagement tools, allowing providers to reduce administrative workload and run their clinics more efficiently through a subscription-based software model.
Callagy Law Firm
January 27, 2026
•[ ransomware, healthcare, finance ]
Callagy Law Firm was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-27. Sector: Professional Services. Country: United States of America. Website: callagylaw.com. CALLAGY LAW, P.C.
650 From Road, Suite 240
Paramus, NJ 07652
callagylaw.com
This law firm specializes in various legal areas, including business litigation, personal injury, family law, and healthcare law.
The firm is known for its commitment to providing comprehensive legal representation and has been operational since 1997.
Total data in the leak: 355 GB (480,169 Files, 38,388 Folders)
Leaked data:
- Clients: companies and individuals
- Data Classification: confidential, Private/Proprietary
- Special data: Corporate email correspondence, external business correspondence, corporate documents,company policies and regulations,customer contracts and NDAs (Non-Disclosure Agreements),
court hearing materials and litigation case files (litigation documents),customers' personal data and their medical confidentiality (PII,PHI) and other related information.
- Financial data: financial metrics / financial performance data, invoices, payments, and other financial transactions.
LGBTQ Center Orange county
January 28, 2026
•[ ransomware, healthcare, government ]
LGBTQ Center Orange county was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-28. Sector: Government & Defense. Country: United States of America. Website: lgbtqcenteroc.org. The LGBTQ Center OC was established as a volunteer organization in 1971 and incorporated in 1975 as a 501(c)(3) non-profit community-based organization.
The Center provides services to more than 20,000 individuals annually across a broad spectrum of culture, ethnicity, age, and economic background.
We will publish all the information next week.
Family Partnerships of Central Florida
January 28, 2026
•[ ransomware, healthcare, government ]
Family Partnerships of Central Florida was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-01-28. Sector: Government & Defense. Country: United States of America. Website: fpocf.org. [AI generated] Family Partnerships of Central Florida is a non-profit organization that offers care for children with special needs. The services are aimed at enhancing the quality of life for children and their families by providing medical, emotional, educational, and social support services. They focus on early intervention and work directly with families to customize care plans for each childs unique needs.
MACT Health Board
January 29, 2026
•[ ransomware, healthcare ]
MACT Health Board was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Healthcare. Country: United States of America. Website: macthealth.org. MACT Health Board
iGlobal Services, Medenet
January 29, 2026
•[ ransomware, healthcare, technology ]
iGlobal Services, Medenet was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-29. Sector: Healthcare. Medenet provides a comprehensive suite of services including EHR
solutions, practice management, credentialing, and coding service
s tailored to the needs of physician practices.
iGlobal Services is a specialized risk management firm focused on
cybersecurity, providing solutions to complex challenges in the
digital and regulated business environment.
We will upload 24gb of corporate data soon. Very detailed employe
es' and customers' data (DLs, passports, SSNs and so on), contrac
ts and agreements, financials, confidential files, NDAs and so on
.
anomatic.com
February 19, 2025
•[ ransomware, manufacturing, automotive ]
anomatic.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2025-02-19. Sector: Manufacturing. Country: United States of America. Website: anomatic.com. Data size claimed by the group: 250 GB. Founded in 1965 and headquartered in New Albany, Ohio, Anomatic is a full-service manufacturer of anodized aluminum and metalized packaging for the automotive, beauty, personal care, consumer electronics, pharmaceutical, medical devices, and spirits industries worldwide
www.roschvisionary.com
January 30, 2026
•[ ransomware, technology, healthcare ]
www.roschvisionary.com was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-01-30. Sector: Technology. Country: Germany. Website: www.roschvisionary.com. Rosch Visionary Systems specializes in software solutions designed specifically for allergy specialists, offering tools such as immunotherapy management, skin testing, and patient tracking. Their products enhance safety, efficiency, reportability, and profitability while being compatible with HL7 compliant electronic health record systems. The company aims to support allergy practices through a comprehensive implementation process, including training and technical support. Their intended clients are allergy specialists and practices in the United States and Canada
Rocky Mountain Associated Physicians
January 26, 2026
•[ ransomware, healthcare ]
Rocky Mountain Associated Physicians was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Healthcare. Country: United States of America. Website: utahbariatrics.com. Utahs Leading Bariatric Specialists, surgical & Medical Weight Loss Solutions in Salt Lake City
casamedica.com.gt
January 30, 2026
•[ ransomware, healthcare, financial ]
casamedica.com.gt was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-30. Sector: Healthcare. Country: Guatemala. Website: casamedica.com.gt. Ransom demand: $60.000. Data size claimed by the group: 300 GB. [AI generated] "Casamedica.com.gt" is a Guatemala-based company that provides a range of medical equipment and supplies. Their product range includes everything from surgical instruments to hospital furniture and diagnostic equipment. Not just limited to sales, Casamedica also provides maintenance services for the equipment. They aim to improve the healthcare sector by catering to the specific needs of professionals in the field.
Beacon Mutual Insurance
January 31, 2026
•[ ransomware, finance, healthcare ]
Beacon Mutual Insurance was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-31. Sector: Financial Services. Country: United States of America. Website: beaconmutual.com. MAJOR DATA LEAK Beacon Mutual Insurance Company
EXPOSED: 275 GB (296,228,795,086 bytes) of highly sensitive internal data
Beacon Mutual Insurance Company (Warwick, RI) the primary workers' compensation insurer for Rhode Island businesses (also operating in MA & CT) has suffered a massive data compromise.
The leaked archive contains approximately 275 GB of uncompressed/internal files and includes the following categories of highly confidential information:
Internal corporate documents and correspondence
Complete financial statements and reports (20182025)
Full employee list with personal details
Confidential agreements, NDAs, vendor contracts, and partnership documents
Detailed claims data: workers' compensation payouts, injury reports, medical records tied to claims
Client / policyholder database: business information, insurance policies, payment history
Personally identifiable information (PII) of individuals (employees, claimants, insured workers) names, SSNs, addresses, dates of birth, contact details, etc.
Training materials, internal manuals, compliance & safety documentation
Multiple system backups and database dumps
and much more internal operational content
Wieson Technologies
January 31, 2026
•[ ransomware, technology, manufacturing ]
Wieson Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-31. Sector: Technology. Country: Taiwan. Website: www.wieson.com. www.wieson.com https://www.zoominfo.com/c/wieson-technologies-co-ltd/128565406 Wieson Technologies specializes in the design and manufacturing of connectors and cable assemblies, with a focus on super high-speed technology and wireless communications. Their product range includes interconnect components, wireless components, medical electronics, and automotive electronics. The company serves various industries such as cloud computing, data communication, and medical electronics. Established in 1990, Wieson Technologies aims to provide innovative solutions to clients in need of advanced electronic connectivity
www.eastersealsnei.org
December 1, 2025
•[ ransomware, leak, healthcare ]
www.eastersealsnei.org was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-01. Sector: Retail & E-Commerce. Country: United States of America. Website: www.eastersealsnei.org. Ransom: 550k
280gb
newhorizonsmedical.org
June 7, 2023
•[ ransomware, healthcare ]
newhorizonsmedical.org was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2023-06-07. Sector: Healthcare. Country: United States of America. Website: newhorizonsmedical.org. Ransom: 90k
236gb
Abdulhadi Hospital
December 1, 2025
•[ ransomware, healthcare ]
Abdulhadi Hospital was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2025-12-01. Sector: Healthcare. Country: Jordan. Website: ecaretest.com. Ransom: ecaretest.com
350k
246gb
Clínica Villa Zaita
December 2, 2025
•[ ransomware, healthcare ]
Clnica Villa Zaita was listed as a victim on the leak site of the ciphbit ransomware group; the attack is estimated to have taken place on 2025-12-02. Sector: Healthcare. Country: Panama. Website: clinicavillazaita.com.
www.precipiodx.com
December 2, 2025
•[ ransomware, healthcare ]
www.precipiodx.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-12-02. Sector: Healthcare. Country: United States of America. Website: www.precipiodx.com. 150gb
