Levante Living
May 3, 2026
•[ ransomware, healthcare, retail ]
Levante Living was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Retail & E-Commerce. Country: Italy. Website: levanteliving.com. levanteliving.com zoominfo.com/c/levante-living-lp/388951109 Levante Living is a Canadian-owned senior living enterprise founded in 2016 by Michael Petersen and Jim MacDonald, and headquartered in Toronto, Ontario, focused on acquiring, managing, and redeveloping senior housing across North America. The company currently operates 24 retirement residences across Ontario, employs over 600 team members, and manages approximately 1,600 investors with over $175 million in senior living assets. Its service offerings span the full care spectrum independent living, assisted living, memory care, respite care, and long-term care guided by the values of dignity, compassion, integrity, and excellence
Ontario Physiotherapy Association
May 3, 2026
•[ ransomware, healthcare ]
Ontario Physiotherapy Association was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Healthcare. Country: Canada. Website: opa.on.ca. opa.on.ca zoominfo.com/c/ontario-physiotherapy-association/130548231 The Ontario Physiotherapy Association (OPA) is a non-profit, physiotherapist-led professional association representing over 5,500 physiotherapists, physiotherapist assistants (PTAs), and students across Ontario, Canada. Its core mission is to provide leadership, advocacy, professional development, and career support to ensure accessible, high-quality physiotherapy services throughout the province. Founded over 60 years ago, OPA has a well-documented history of advocacy wins from expanding PT scopes of practice to supporting virtual care access and removing referral requirements from physicians
MIMS
April 27, 2026
•[ ransomware, healthcare, technology ]
MIMS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: Singapore. Website: mims.com. mims.com zoominfo.com/c/mims-pte-ltd/354424916 MIMS is a pharmaceutical prescribing reference guide first published in the United Kingdom in 1959 by Haymarket Media Group. The platform provides comprehensive drug information including dosages, interactions, clinical guidelines, and prescribing data for healthcare professionals across the globe. MIMS operates internationally across Asia, Australia, and beyond, with dedicated editions for countries including Malaysia, India, Indonesia, Japan, Singapore, and many others. Its mobile app and online database are used daily by doctors and pharmacists for drug lookups, medical news, and CME articles
Aerodiagnostics
May 6, 2026
•[ ransomware, healthcare, financial ]
Aerodiagnostics was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Healthcare. Country: United States of America. Website: aerodiagnostics.com. Aerodiagnostics, LLC is a Massachusetts-based laboratory specializing in advanced diagnostic testing for gastrointestinal disorders, including Small Intestinal Bacterial Overgrowth (SIBO), fructose malabsorption, sucrose intolerance, and lactose intolerance.
The company utilizes state-of-the-art technology and non-invasive breath tests to provide accurate results while ensuring a high level of customer service
Laek: 50GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Mundo Amtae
May 6, 2026
•[ ransomware, hack, healthcare ]
Mundo Amtae was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-06. Country: Mexico. Website: mundoamtae.com. mundoamtae.com zoominfo.com/c/mundo-amtae/372405633 Mundo AMTAE (Asociacion Mutual de Trabajadores Estatales) is one of Argentina's top 5 mutual aid organizations, founded in 1987 and headquartered at Lavalle 3155, Buenos Aires. With over 30 years of experience and 100,000 members spread across 20 branches nationwide, the organization provides a broad range of social, health, and financial services to state workers, retirees, and the general public. Its core offerings include medical consultations across all specialties, dental care, clinical analysis, physiotherapy, home medical visits, 24/7 ambulance service, and optical coverage. AMTAE also offers loan programs and financial assistance, with tiered membership plans (Plata, Dorado, Platino) covering varying levels of healthcare and personal accident protection
Clinical Registry Solutions
April 9, 2026
•[ ransomware, healthcare ]
Clinical Registry Solutions was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Healthcare. Country: United States of America. Website: clinicalregistrysolutions.com. Clinical Registry Solutions (CRS) is a healthcare data management company based in New York, Un
ited States, formerly operating as Cardiac Registry Support. The company specializes in clinica
l data abstraction, medical record abstraction, and registry support services for hospitals, he
alth systems, contract research organizations, and clinical staffing firms across the United St
ates and Canada.
We will upload 41gb of corporate data soon. Detailed employee personal information (passports,
DLs, SSNs, health information, and other docs), client documents and personal information, fina
ncials, payment details, contracts and agreements, NDAs, and so on.
Laclinic-Montreux
May 6, 2026
•[ ransomware, healthcare ]
Laclinic-Montreux was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Healthcare. Country: Switzerland. Website: www.laclinic.ch.
smp.cat
May 6, 2026
•[ ransomware, healthcare ]
smp.cat was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: Spain. Website: smp.cat. Is a private healthcare organization based in Catalonia, Spain, operating in the Hospitals & Physicians Clinics sector. Founded in 1993
datasavior.com
May 6, 2026
•[ ransomware, technology, healthcare ]
datasavior.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Technology. Country: United States of America. Website: datasavior.com. +1 (512) 707-0026. Datasavior is a full-service systems integration company based in Austin, Texas, specializing in IT support and fiber cable installations. They offer comprehensive solutions for medical and dental office IT, including practice management, data backup services, and advanced antivirus software. Their target clients include businesses in need of reliable technology solutions and support, particularly in the healthcare sector. With a team of skilled technicians, Datasavior aims to help clients optimize their technology for current and future needs. Stolen: 540mb 1,410 Files
Rehab Clinics Group Ltd
May 7, 2026
•[ ransomware, healthcare ]
Rehab Clinics Group Ltd was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-07. Sector: Healthcare. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] Rehab Clinics Group Ltd is a UK-based healthcare company specialising in rehabilitation and addiction treatment services. Operating across England, it provides residential and outpatient programmes for individuals dealing with substance misuse, alcohol dependency, and mental health conditions. The company works with private patients and NHS referrals, offering medically supervised detox, therapy, and aftercare support through a network of treatment centres.
cmswpc.com
May 1, 2026
•[ ransomware, healthcare ]
cmswpc.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United States of America. Website: cmswpc.com. All patient medical records in their entirety. All data from the medical center, including personal and confidential information, will be stolen. The data will be divided into 7 parts, with each part containing 200300 GB
Réseau Radiologique Romand
April 30, 2026
•[ ransomware, healthcare ]
Rseau Radiologique Romand was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Healthcare. Country: Switzerland. Website: groupe3r.ch. 3R - Rseau Radiologique Romand is a Swiss medical imaging network that helps patients get clea
r, comfortable medical scans. They work with local hospitals and medical groups, using advanced
technology to quickly share detailed images with doctors.
We will upload 48gb of corporate data soon. Detailed employee personal information (passport, D
Ls, IDs and other personal information), patient information (phone, addresses, medical info an
d so on), payment details, NDAs and so on.
Neurotrials Research Inc
May 5, 2026
•[ ransomware, healthcare ]
Neurotrials Research Inc was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Healthcare. Country: United States of America. Website: neurotrials.com. Founded in 1997, NeuroTrials Research is an outpatient and inpatient research facility located in Atlanta. The clinic occupies 12,000 square feet, including a 15-bed, state-of-the-art sleep lab and inpatient clinical research unit, which is designed specifically for the comfort and safety of subjects participating in its clinical trials. Today, NeuroTrials has conducted more than 175 clinical trials on over 2,500 volunteers throughout the Atlanta metro area.
McCarthy
May 8, 2026
•[ ransomware, manufacturing, healthcare ]
McCarthy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: mccarthyinc.com. mccarthyinc.com McCarthy, Inc., founded in 1955 and based in Savannah, Georgia, specializes in supplying metal doors and frames, wood doors, builder's hardware, toilet partitions, signage, louvers, and specialty accessories. The company serves diverse industries including healthcare, education, commercial, government, manufacturing, and hospitality sectors across the region. McCarthy provides comprehensive products and services from project inception through completion, focusing on building lasting relationships with project teams to ensure utmost client satisfaction.
Arizona Professional Painting
May 8, 2026
•[ ransomware, manufacturing, technology ]
Arizona Professional Painting was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: azpropaint.com. azpropaint.com Arizona Professional Painting is a family-owned and operated commercial and industrial painting contractor established in 1994, based in Phoenix, Arizona. The company specializes in diverse sectors including data centers, healthcare facilities, sports facilities, industrial projects, and tenant improvements across the state. With SBE, WBE, MBE, and DBE certifications, they maintain an exceptional safety record with a .66 EMR rating and zero recordable on-the-job incidents. Their experienced team provides comprehensive interior and exterior painting, industrial coatings, floor coatings, and ongoing facility maintenance services.
DermaPharm
May 8, 2026
•[ ransomware, healthcare, manufacturing ]
DermaPharm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Healthcare. Country: Denmark. Website: dermapharm.dk. dermapharm.dk DermaPharm A/S is a 100% Danish-owned skincare company founded in 1980, specializing in mild, eco-certified, and allergy-friendly personal care products. Headquartered in Frup, Denmark, they operate a 10,000 m production facility and serve as both a brand owner (Derma) and a full-service private label manufacturer for third parties The company is a market leader in Nordic suncare and a trusted partner of the Danish Cancer Society
The American Board of Preventive Medicine
May 8, 2026
•[ ransomware, healthcare ]
The American Board of Preventive Medicine was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Healthcare. Country: United States of America. Website: theabpm.org. A healthcare certification organization.
CarePoint Health
May 8, 2026
•[ ransomware, healthcare ]
CarePoint Health was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Healthcare. Country: Canada. Website: carepointhealth.ca. CarePoint Health will provide all patients of the company's affiliated physicians who would benefit from team based care.
Gastroenterology & Hepatology
April 17, 2026
•[ ransomware, healthcare ]
Gastroenterology & Hepatology was listed as a victim on the leak site of the LeakBazaar ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United States of America. Website: gandhofcny.com. Full database for sale 167,303 patients, 124,761 SSN, 49,798 with sensitive diagnoses:
- 167,303 patients 124,761 with SSN, 166,402 (99%) with address, 164,296 (98%) with phone, 85,318 (51%) with email
- 1,093,863 diagnoses (ICD-10), 1,547,142 medications, 186,246 pathology specimens with narrative reports
- Sensitive (dx + meds): 49,798 patients 44,861 with SSN. Mental health: 43,902 | Substance/Alcohol: 5,111 | STIs: 2,779 | Cancer: 2,708 | Hepatitis C: 1,906
- Includes notable individuals (politicians, business people, public figures)
lifelongaccess.org
May 10, 2026
•[ ransomware, healthcare ]
lifelongaccess.org was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Healthcare. Country: United States of America. Website: lifelongaccess.org. Lifelong Access is a dedicated organization that supports individuals with disabilities through a wide range of specialized programs tailored to their unique needs. Serving clients from birth to the end of life, it focuses on empowering individuals and breaking down barriers, ensuring they have access to resources that foster thriving lives. The company excels in pediatric therapy and adult services, offering therapies, community day services, behavioral health clinics, and supported employment opportunities. With over 70 years of experience and a team of over 200 professionals, Lifelong Access continues to expand its impact in the McLean County community.
