Colorado Pulmonary Intensivists
April 9, 2026
•[ ransomware, healthcare ]
Colorado Pulmonary Intensivists was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Healthcare. Country: United States of America. Website: cpimedicine.com. Specializes in services related to pulmonology and critical care, including outpatient pulmonary care and sleep medicine
Caja De Seguro Social
April 14, 2026
•[ ransomware, government, healthcare ]
Caja De Seguro Social was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Government & Defense. Country: Panama. Website: www.css.org.pa. www.css.org.pa https://www.zoominfo.com/c/caja-de-seguro-social/455482072 www.css.gob.pa Caja de Seguro Social (CSS), the Panamanian Social Security Fund. The CSS is a public institution responsible for administering and governing the national social security and healthcare system in the Republic of Panama. Manages a network of hospitals and clinics nationwide, serving approximately 84% of Panama's population. 3TB of data, including pension, medical, and investment data.
As gentlemen, we offered to pay a fair price for the mistake made, after which all data would be permanently deleted from our servers. The management decided that their influence on public opinion is so strong that the incident will remain unnoticed, so we are forced to publish proof of the hack and put the medical and pension databases containing 80% of Panama's population up for sale as a single package for 2 BTC.
BRC Biotechnology
April 14, 2026
•[ ransomware, healthcare, manufacturing ]
BRC Biotechnology was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: brcbiotech.com. brcbiotech.com BRC Biotechnology is a biopharmaceutical contract development and manufacturing company that strictly adheres to GMP standards from China, the USA, and Europe. It holds certifications including EU GMP QP compliance, US FDA FEI registration, and ISO 9001:2015, offering professional risk assessments, customized biomanufacturing solutions, and welcoming regular client audits.
Intra
April 14, 2026
•[ ransomware, healthcare ]
Intra was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: New Zealand. Website: intracare.co.nz. intracare.co.nz zoominfo.com/c/intra-ltd/430152179 IntraCare is New Zealand's leading private centre of excellence for advanced image-guided medical diagnostics and interventions, founded in 1990 in Auckland. It specialises in three areas: Interventional Cardiology, Electrophysiology, and Interventional Radiology, with over 30 practising specialists treating more than 2,000 patients per year. The clinic operates from two locations Allevia Hospital Epsom and Southern Cross Hospital North Shore and is internationally recognized for pioneering procedures like TAVI, implanting the first device in the Asia-Pacific region in 2008
decaturdiagnosticlab.net
April 13, 2026
•[ ransomware, healthcare ]
decaturdiagnosticlab.net was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Healthcare. Country: United States of America. Website: decaturdiagnosticlab.net. Located inside the Med-Surg Complex; Decatur Diagnostic Lab is a privately owned lab servicing the D...
vitexpharma.com
March 29, 2026
•[ ransomware, healthcare, leak ]
vitexpharma.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Healthcare. Country: Australia. Website: vitexpharma.com. Vitex Pharmaceuticals is Australia's leading contract manufacturer specializing in vitamins, mi...
Gastroenterology & Hepatology of CNY
April 14, 2026
•[ ransomware, healthcare, leak ]
Gastroenterology & Hepatology of CNY was listed as a victim on the leak site of the exitium ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: gandhofcny.com. Website: gandhofcny.com
Zoominfo: https://www.zoominfo.com/c/gastroenterology--hepatology-of-cny-pc/346091487
Data sample, whole internal data will be sold if they wouldn't pay ransom.
Also Digestive Disease Center of CNY, LLC (ddcofcny.com)
GI practice + AAAHC-accredited endoscopy center. Syracuse, New York, USA.
Full database for sale 167,303 patients, 124,761 SSN, 49,798 with sensitive diagnoses:
- 167,303 patients 124,761 with SSN, 166,402 (99%) with address, 164,296 (98%) with phone, 85,318 (51%) with email
- 1,093,863 diagnoses (ICD-10), 1,547,142 medications, 186,246 pathology specimens with narrative reports
- Sensitive (dx + meds): 49,798 patients 44,861 with SSN. Mental health: 43,902 | Substance/Alcohol: 5,111 | STIs: 2,779 | Cancer: 2,708 | Hepatitis C: 1,906
- Includes notable individuals (politicians, businesspeople, public figures)
bela - pharm
April 15, 2026
•[ ransomware, healthcare ]
bela - pharm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Germany. Website: www.bela-pharm.com. bela-pharm GmbH specializes in the production of veterinary pharmaceuticals aimed at enhancing animal health. Their product range includes solutions for various livestock such as pigs, cattle, poultry, horses, sheep, goats, and small pets. The company serves veterinarians and international clients, offering expertise in drug production and approval. Committed to quality and innovation, bela-pharm focuses on ensuring safe and effective treatments for animals worldwide.
FriendlyCare Pharmacy
April 15, 2026
•[ ransomware, healthcare ]
FriendlyCare Pharmacy was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Australia. Website: friendlycare.com.au. FriendlyCare Pharmacy offers a wide range of health and beauty products, including cosmetics, skincare, personal care, and medical devices. Their services cater to various health needs such as asthma care, diabetes management, and first aid supplies. The pharmacy targets a diverse clientele, including individuals seeking general health products, beauty enthusiasts, and families in need of baby care items. With multiple store locations and a commitment to customer satisfaction, they provide a price match guarantee and free shipping on orders over $99.
Biotehnos
April 16, 2026
•[ ransomware, healthcare ]
Biotehnos was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Healthcare. Country: Romania. Website: biotehnos.ro. Biotehnos is a Romanian pharmaceutical company founded in 1993 by Prof. Dr. Ioan Manzatu. It is currently headquartered in Otopeni, Ilfov County, near the countrys capital, Bucharest, and celebrated its 30th anniversary in 2023.
Qatar Biomedical Research Institute (QBRI)
April 17, 2026
•[ ransomware, healthcare, technology ]
Qatar Biomedical Research Institute (QBRI) was listed as a victim on the leak site of the crypto24 ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: Qatar. Website: www.hbku.edu.qa/en/qbri. [AI generated] Qatar Biomedical Research Institute (QBRI) is a research institute based in Qatar, operating under Hamad Bin Khalifa University. It focuses on biomedical research in areas such as genomics, diabetes, cancer, and neurological disorders. QBRI aims to advance precision medicine and translational research to address health challenges prevalent in Qatar and the broader region, contributing to the country's science and innovation goals.
medicalnetworks CJ GmbH & Co. KG
April 17, 2026
•[ ransomware, healthcare, technology ]
medicalnetworks CJ GmbH & Co. KG was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: Germany. Website: medicalnetworks.de. Medicalnetworks specializes in integrated healthcare solutions, offering services such as ascleoncare and Hybrid-DRG billing. Their products are designed to streamline processes for health insurance providers and medical practices. The company aims to enhance the efficiency of healthcare delivery through innovative technology. Their intended clients include healthcare providers and insurance companies seeking to improve their operational workflows
Millennium Dental Technologies
April 16, 2026
•[ ransomware, healthcare, manufacturing ]
Millennium Dental Technologies was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Healthcare. Country: United States of America. Website: www.lanap.com. Founded in 1994 and Headquartered in Cerritos, California. Millennium Dental Technologies, Inc manufactures and distributes dental products. It offers PerioLase MVP-7, a laser designed especially for laser periodontal therapy that performs soft and hard tissue laser procedures.
***
March 31, 2026
•[ ransomware, healthcare ]
*** was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-03-31. Sector: Healthcare. Website: .. A healthcare organization
Teleos Systems
April 19, 2026
•[ ransomware, technology, healthcare ]
Teleos Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-19. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: teleosvet.co.uk. teleosvet.co.uk Teleos Systems Limited is a UK-based software company founded on 14 November 1997, headquartered in St. Neots, Cambridgeshire, and is the largest independent supplier of Veterinary Practice Management Systems (VPMS) in the UK and Ireland. The company has been developing and supporting its flagship veterinary management software for over 20 years, serving small independent practices as well as large multi-site veterinary groups.
Greenpharma
April 15, 2026
•[ ransomware, healthcare, leak ]
Greenpharma was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Healthcare. Country: Brazil. Website: greenpharma.com.br. greenpharma.com.br zoominfo.com/c/greenpharma-quimica-e-farmaceutica-eireli/558034818 Greenpharma Qumica & Farmaceutica is a Brazilian pharmaceutical manufacturer founded in 1989 in Anapolis, Gois, acquired in 1995 by industrial pharmacist Eduardo Gonalves. The company produces generic and OTC medicines, distributes across all Brazilian states through pharmacy and hospital channels, and operates its own certified pharmaceutical equivalence laboratory (EQFAR-21) accredited by ANVISA
Cooperativa de Hospitales de Antioquia - COHAN
April 20, 2026
•[ ransomware, healthcare ]
Cooperativa de Hospitales de Antioquia - COHAN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Healthcare. Country: Colombia. Website: www.cohan.org.co.
Nordenta (a daughter company of LIFCO)
April 20, 2026
•[ ransomware, healthcare ]
Nordenta (a daughter company of LIFCO) was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-20. Sector: Healthcare. Country: Denmark. Website: nordenta.dk. Nordenta og al dente nyhedsbrev Tilbud, produktnyheder og inspiration Ja tak, jeg vil gerne modtage tilbud, information og nyheder fra Nordenta og al dente via e-mail vedrrende varer og services inden for Nordenta og al dentes produktsortiment. Samtykket kan til enhver tid trkkes tilbage. Personoplysninger behandles fortroligt, ls mere i vores privatlivs- og cookiepolitik.
"The beneficial owner of Nordenta is Carl Bennet".
ViaQuest
April 21, 2026
•[ ransomware, healthcare, leak ]
ViaQuest was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Transportation. Country: United States of America. Website: viaquestinc.com. Large-scale data breach at a care provider for seriously ill patients.
Salimetrics
April 21, 2026
•[ ransomware, healthcare, financial ]
Salimetrics was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-21. Sector: Healthcare. Country: United States of America. Website: salimetrics.com. Salimetrics specializes in salivary bioscience, offering industry
-standard saliva collection methods, salivary assay kits, and tes
ting services for reliable results. Their products cater to resea
rchers and clinicians involved in biobehavioral research and diag
nostics, providing tools for sample collection and analysis.
We will upload corporate data soon. Employee information, patient
s information (blood tests and other health information), financi
als, internal confidential files and so on.
