STERIMED
April 21, 2026
•[ ransomware, healthcare ]
STERIMED was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Healthcare. Country: France. Website: sterimed.fr.
INCYTE
April 21, 2026
•[ ransomware, healthcare ]
INCYTE was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Healthcare. Country: United States of America. Website: www.incyte.com. Incyte Corporation, a biopharmaceutical company, focuses on the discovery, development, and commercialization of various therapeutics in the United States. The company offers JAKAFI, a drug for the treatment of myelofibrosis and polycythemia vera cancers; and Iclusig, a kinase inhibitor to treat chronic myeloid leukemia and philadelphia-chromosome positive acute lymphoblastic leukemia.
You have been given clear instructions, reach out to us before it's too late.
Integer Holdings
November 10, 2025
•[ ransomware, manufacturing, healthcare ]
Integer Holdings was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-11-10. Sector: Manufacturing. Country: United States of America. Website: integer.net. [AI generated] Integer Holdings is a US-based medical device manufacturer headquartered in Frisco, Texas. The company specializes in producing advanced technologies for the medical, non-medical, and portable medical markets, including batteries, power systems, and implantable components. It serves original equipment manufacturers across cardiac, neuromodulation, and vascular sectors, making it a key supplier in the global medical device industry.
Virginia Health Services
April 23, 2026
•[ ransomware, healthcare ]
Virginia Health Services was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Healthcare. Country: United States of America. Website: www.vahs.com. [AI generated] Virginia Health Services is a healthcare organization based in Virginia, United States. It provides a range of senior care and rehabilitation services, including skilled nursing, assisted living, memory care, and outpatient therapy. Operating multiple facilities across the Hampton Roads region, the company serves elderly and recovering patients, focusing on long-term care, post-acute rehabilitation, and community-based health support services.
meditron.com.ve
April 23, 2026
•[ ransomware, healthcare ]
meditron.com.ve was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Healthcare. Country: Venezuela (Bolivarian Republic of). Website: meditron.com.ve. Data size claimed by the group: 102 GB. Meditron C.A. is a Venezuelan company founded in 1972, specializing in the marketing and after-sales service of medical equipment. They also design, construct, and equip healthcare infrastructures, providing comprehensive solutions in the health sector. Their offerings include a wide range of medical devices and technical support services, catering to various healthcare needs. Meditron represents globally recognized brands and is committed to supporting medical innovation and excellence in Venezuela.
Lessard Dental
April 10, 2026
•[ ransomware, healthcare ]
Lessard Dental was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-04-10. Sector: Healthcare. Country: Canada. Website: www.lessarddental.com. Data size claimed by the group: 160GB. Lessard Dental is a family dental practice located in West Edmonton, offering a wide range of services including cosmetic dentistry, dental implants, orthodontics, and emergency care. The clinic is dedicated to providing personalized care tailored to the unique needs of each patient, ensuring a comfortable experience for individuals of all ages. With a team of experienced dentists, they focus on promoting long-term oral health and beautiful smiles. Lessard Dental welcomes new patients and is committed to making dental visits a positive experience.
tlctrialteam.com
April 24, 2026
•[ ransomware, healthcare ]
tlctrialteam.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Healthcare. Country: United States of America. Website: tlctrialteam.com. TLC Trial Team is a personal injury law firm based in Winter Haven, Florida. The firm handles accident and injury-related cases.
Swansea Ambulance Corps
April 17, 2026
•[ ransomware, healthcare ]
Swansea Ambulance Corps was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Data size claimed by the group: 0GB.
reddycardiology.com
April 10, 2026
•[ ransomware, healthcare ]
reddycardiology.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-10. Sector: Healthcare. Country: United States of America. Website: reddycardiology.com. Reddy Cardiology provides comprehensive cardiovascular care and diabetes management services in Sugar Land, TX. The clinic specializes in the prevention and treatment of heart disease, high blood pressure, and diabetes, utilizing state-of-the-art technology and personalized treatment plans. Their intended clients include adult patients referred by primary physicians for various cardiac symptoms and those seeking preventive care. Reddy Cardiology also offers a unique diet plan, the Reddy Diet, aimed at promoting heart health and managing diabetes.
Employees: 50
Revenue: $5 Million
Industry: Hospitals & Physicians Clinics
Phone Number: (281) 491-0044
mopec.com
April 27, 2026
•[ ransomware, manufacturing, healthcare ]
mopec.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Manufacturing. Country: United States of America. Website: mopec.com. Mopec supplies American-made medical equipment and laboratory products for pathological, histological, autopsy, and morgue services.
medikaplaza.com
April 27, 2026
•[ ransomware, healthcare ]
medikaplaza.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Healthcare. Country: Pakistan. Website: medikaplaza.com. Medika Plaza is a healthcare company in Indonesia that provides medical services, corporate medic...
bms.com
April 27, 2026
•[ ransomware, healthcare, leak ]
bms.com was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Healthcare. Country: United States of America. Website: bms.com. Pharmaceutical company. personal data - 302 lines
polleninformation.at
April 27, 2026
•[ ransomware, healthcare, leak ]
polleninformation.at was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Healthcare. Country: Austria. Website: polleninformation.at. Pollen situation informational site. Personal info + Pass. 22140 lines
pindrophearing.co.uk
April 27, 2026
•[ ransomware, healthcare ]
pindrophearing.co.uk was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. Website: pindrophearing.co.uk. Were specialists in the diagnosis and treatment of hearing conditions, but just as important i...
Nephrology Associates
April 6, 2026
•[ ransomware, healthcare ]
Nephrology Associates was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-04-06. Sector: Healthcare. Country: United States of America. Website: www.arnapa.com. Nephrology Associates, PA is a leading central Arkansas nephrology practice with seven highly trained physicians across seven locations. They provide compassionate kidney care, accept all insurances, and aim to create a welcoming environment for patients.
rotak.it
April 29, 2026
•[ ransomware, technology, healthcare ]
rotak.it was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Technology. Country: Italy. Website: rotak.it. Rotak (specifically in the context of Rotak Instruments) focuses on the distribution of specialized medical and analytical instrumentation, with related entities in industrial engineering and automation Stolen: 22.5gb 20k files
stllc.org
April 21, 2026
•[ ransomware, healthcare ]
stllc.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Other. Country: United States of America. Website: stllc.org. Welcome to St. Luke Lutheran Community St. Luke Lutheran Community is a not-for-profit, continuing...
Costa Solutions, LLC
April 29, 2026
•[ ransomware, financial, technology ]
Costa Solutions, LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: United States of America. Website: costasolutions.com. [warehouse] Costa Solutions, LLC a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 2001,000 employees.
The file server contained the complete operational, financial, legal, and human resources infrastructure of the company:
3,0008,000+ individuals' personal data current employees, former employees (12 years of records), independent contractors, employee dependents, and job applicants. SSNs on W-2s, W-4s, 1099s, I-9s, background checks. Bank account and routing numbers on 200+ direct deposit forms.
Medical and injury records 150+ employee injury/medical files from 20132026, FMLA medical certifications, drug test results (random, reasonable suspicion, post-incident, promotional), and workers' compensation claims for 23+ named individuals.
CEO's entire file system Josh Wean's Documents folder (5.3 GB) including P&L statements, a 17-subfolder "Confidential" directory, legal correspondence, strategic plans, a C-12 peer advisory group archive, and a $RECYCLE.BIN with 60+ deleted items.
Client contracts and competitive intelligence pricing, SLAs, and contract terms for HEB, CVS, Sysco, Amazon, McLane, Labatt, Valvoline. Competitor pricing intelligence. RFP bid documents with cost models.
Active legal case files litigation records (20212022), HR internal investigation notes (20182021), arbitration files, active investigations marked "DO NOT DELETE" all subject to attorney-client privilege.
Infrastructure secrets an HEB production server TLS certificate, a Cisco AnyConnect VPN installer, and the CEO's Remote Desktop connection file.
Corporate financials multi-year budgets, valuation & sale documents (indicating possible M&A activity), PPP loan forgiveness records, Form 5500 ERISA filings, and annual reporting.
Advanta Genetics LLC
April 17, 2026
•[ ransomware, healthcare, finance ]
Advanta Genetics LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United States of America. Website: aalabs.com. [health] Advanta Genetics LLC a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives including highly sensitive chronic opioid therapy charts flagged by the Texas Medical Board and elderly Medicare audit records. Provider identities and prescribing power SSNs, DEA numbers, and state licenses from 20+ states that can be turned into black-market "script pads". Gold-standard identity theft kits W-2s, I-9s with passport scans, and full employee packages for 50+ staff. 102 complete QuickBooks company files exposing every vendor, payroll run, bank link, and financial secret across the Advanta/RedLeaf/OSPRI empire. High-value trade secrets OSPRI Biopath investment decks, valuation models, FDA pre-submission packets, and the proprietary "The Brain" AI diagnostic architecture. Explosive privileged attorney-client memos on active regulatory battles (Texas Medical Board Remedial Plan #19-153 and a federal NORA subpoena). Active Directory domain controller data (NTDS.dit and SAM hives).
zsiclife.co.zm
April 26, 2026
•[ ransomware, healthcare, finance ]
zsiclife.co.zm was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Healthcare. Country: Zambia. Website: zsiclife.co.zm. ZSIC Life Plc is a leading assurance, savings, and wealth management company in Zambia, offering a diverse range of life...
