Cardiovascular Medical Group of Southern California (CVMG)
January 11, 2026
•[ ransomware, healthcare ]
Cardiovascular Medical Group of Southern California (CVMG) was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-11. Sector: Healthcare. Country: United States of America. Website: cvmg.com. Cardiovascular Medical Group of Southern California provides a comprehensive range of cardiovascular services, including diagnostic testing, disease management, and advanced treatments for patients of all ages. Their board-certified physicians specialize in cardiology and internal medicine, ensuring expert care and a focus on preventing heart disease. The clinic leverages the latest medical technologies to support patient health and offers accessible virtual services such as electronic appointment requests and test results. Their commitment to personalized care is evident in their strong physician-patient relationships and partnerships with renowned medical institutions.
https://seha.org.sa
January 14, 2026
•[ ransomware, healthcare ]
https://seha.org.sa was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Healthcare. Country: Saudi Arabia. Website: seha.org.sa. https://seha.org.sa/ This is the official website of the Health Services Association in the Qassim region of Saudi Arabia. It is a non-profit/charitable organization that provides health and social services to those in need.
Pathology Associates Of Saint Thomas
January 14, 2026
•[ ransomware, healthcare ]
Pathology Associates Of Saint Thomas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-14. Sector: Healthcare. Country: United States of America. Website: www.pastnashville.com.
JJ White
November 20, 2025
•[ ransomware, manufacturing, healthcare ]
JJ White was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2025-11-20. Sector: Manufacturing. Country: United States of America. Website: jjwhiteinc.com. Data size claimed by the group: 512GB. [AI generated] JJ White is a multi-divisional construction company based in Philadelphia, Pennsylvania. It specializes in general, mechanical and industrial construction with additional services in HVAC maintenance and service, fire protection, and rigging projects. The company operates across the United States working with industries such as healthcare, pharmaceutical, petrochemical, and manufacturing.
MicroPrecision
January 16, 2026
•[ ransomware, manufacturing, healthcare ]
MicroPrecision was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-16. Sector: Manufacturing. Country: Switzerland. Website: micro-precision.com. MicroPrecision specializes in defect-free custom turned and mille
d products, offering precision manufacturing services to a variet
y of industries, including medical, automation, and oil and gas.
We will upload 10gb of corporate data soon. Lots of operational f
iles, customer data, employee files and so on.
Laboratorios Smasac
January 17, 2026
•[ ransomware, healthcare ]
Laboratorios Smasac was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Mexico. Website: www.smasac.com.
ccbrt.org
January 17, 2026
•[ ransomware, healthcare ]
ccbrt.org was listed as a victim on the leak site of the benzona ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: Tanzania, United Republic of. Website: ccbrt.org. Ransom demand: $500.000. Data size claimed by the group: 1.8TB. [AI generated] Comprehensive Community Based Rehabilitation in Tanzania (CCBRT) is a healthcare organization that operates primarily in Tanzania. The organization aims to provide affordable, high-quality healthcare services to the local community, particularly those with disabilities. It focuses on areas like disability hospital services, rehabilitation, eye health, maternal and newborn healthcare. CCBRT is also known for its training and capacity building activities.
Cary Pediatric Center
January 17, 2026
•[ ransomware, healthcare ]
Cary Pediatric Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: carypediatriccenter.com.
Southern Alberta Community Living Association
January 18, 2026
•[ ransomware, government, healthcare ]
Southern Alberta Community Living Association was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-18. Sector: Government & Defense. Country: Canada. Website: sacla.ca. SACLA provides individualized services and supports aimed at assisting individuals with disabilities to achieve their personal goals. Established in 1980, the association focuses on building vibrant communities where every person is connected, contributing, and valued. Their services are tailored to the unique needs of each individual, beginning with a comprehensive consultation to determine the best approach for fostering quality of life and aspirations. SACLA also engages in projects like MyCompass and CATALYST to promote empowerment and address issues such as unemployment for marginalized groups.
wohnverbund-st-gertrud.de
January 19, 2026
•[ ransomware, healthcare ]
wohnverbund-st-gertrud.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-19. Sector: Healthcare. Country: Germany. Website: wohnverbund-st-gertrud.de. Wohnverbund St. Gertrud is a German social care and residential support organisation located in Morsbach, North Rhine-Westphalia, Germany. It operates
HexaCream Dental Laboratory
November 28, 2025
•[ ransomware, healthcare ]
HexaCream Dental Laboratory was listed as a victim on the leak site of the blackshrantac ransomware group; the attack is estimated to have taken place on 2025-11-28. Sector: Healthcare. Country: Thailand. Website: hexadentallab.com.
Unimed Anápolis
January 20, 2026
•[ ransomware, healthcare ]
Unimed Anpolis was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Healthcare. Country: Brazil. Website: unimedanapolis.com.br. Unimed as a whole is a physician-owned healthcare and health insurance cooperative in Brazil, one of the largest of its kind in the world, operating through many regional cooperatives and serving millions of beneficiaries with managed healthcare services. Unimed Anpolis is part of Unimed, a large Brazilian medical cooperative and health insurance provider. It offers a variety of healthcare plans tailored to people and companies in the region, giving members access to a broad network of affiliated doctors, hospitals, and medical services. The plans are designed to meet different needs and include coverage through a wide accredited healthcare network unimedanapolis.com.br
Orthopaedic Specialists of Massachusetts
January 17, 2026
•[ ransomware, healthcare ]
Orthopaedic Specialists of Massachusetts was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-01-17. Sector: Healthcare. Country: United States of America. Website: www.orthomass.com. Data size claimed by the group: 300GB. Orthopaedic Specialists of Massachusetts provides superior orthopaedic and sports medicine care through a team of expert surgeons and physicians. Their services include surgical and non-surgical treatments for a variety of orthopaedic issues, such as arthroscopic surgery, joint replacements, and sports medicine. With locations in Norwood, Milton, and Sandwich, MA, they cater to patients of all ages and offer expedited appointments. The practice is dedicated to delivering compassionate care and improving patients' health and quality of life.
Asian Heart Institute
January 21, 2026
•[ ransomware, healthcare ]
Asian Heart Institute was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Healthcare. Country: India. Website: www.asianheartinstitute.org. Asian Heart Institute (AHI) is a leading cardiac care hospital located in Mumbai, India, specializing in comprehensive heart treatment. The institute offers a wide range of services including cardiology, cardiac surgery, and pediatric cardiac care, with a strong emphasis on personalized and expert care. AHI has treated over 425,000 patients, showcasing its reputation for excellence with a 99.83% success rate in cardiac surgeries. Designed to cater to both local and international patients, AHI is committed to ensuring high-quality healthcare by utilizing advanced technology and minimally invasive procedures.
Bayside Dental
January 21, 2026
•[ ransomware, healthcare ]
Bayside Dental was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Healthcare. Country: United States of America. Website: www.baysidedental.com. Are you looking for a dentist in Rowlett, TX, 75088 near Mesquite? Bayside Dental offers general, restorative & cosmetic dentistry services.
Spiros Industries
January 22, 2026
•[ ransomware, manufacturing, healthcare ]
Spiros Industries was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-01-22. Sector: Manufacturing. Country: United States of America. Website: spirosind.com. Spiros Industries is a custom manufacturing company specializing
in precision springs and wire forms, known for its commitment to
quality and expertise. They serve various industries, particularl
y medical, firearms, and packaging, and offer services including
prototyping and specialty packaging.
We will upload over 20gb of corporate data soon. Detailed employe
e personal information (w4 forms, passports, DLs medical informat
ion, credit cards and so on), customer files, financial and accou
nting information, contracts and agreements, NDAs and so on.
Farmacias Vilela
January 22, 2026
•[ ransomware, healthcare, hack ]
Farmacias Vilela was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-22. Sector: Healthcare. Country: Spain. Website: www.farmaciasvilela.com.ar.
Supriya Aesthetic Dermatology
January 23, 2026
•[ ransomware, healthcare ]
Supriya Aesthetic Dermatology was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-23. Sector: Healthcare. Country: United States of America. Website: supriyamd.com. Data size claimed by the group: 300 GB. Supriya Aesthetic Dermatology
****cr*nem*ds.c*m
January 24, 2026
•[ ransomware, healthcare, leak ]
****cr*nem*ds.c*m was listed as a victim on the leak site of the devman ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Healthcare. Country: Svalbard & Jan Mayen. Website: ****cr*nem*ds.c*m. Patient data, medical cards clinic records
www.advancedcoolingtech.us
January 24, 2026
•[ ransomware, manufacturing, healthcare ]
www.advancedcoolingtech.us was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Manufacturing. Country: United States of America. Website: www.advancedcoolingtech.us. Advanced Cooling Technologies, Inc is a leading provider of medical cooling solutions, specializing in the distribution of Airsys Medical Chillers in the USA. They offer a comprehensive range of services including replacement chiller sales, maintenance contracts, OEM parts, and technical support. With over 20 years of experience, ACT is recognized for delivering quality service and high availability chillers to hospitals, contractors, and industry peers.
