jec.co.id
April 19, 2026
•[ ransomware, healthcare ]
jec.co.id was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-19. Sector: Other. Country: Indonesia. Website: jec.co.id. JEC Eye Hospitals and Clinics is a trusted eye hospital in Indonesia, offering advanced services in...
UiTM Holdings
June 10, 2026
•[ ransomware, education, healthcare ]
UiTM Holdings was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-10. Sector: Education. Country: Malaysia. Website: uitmholdings.com. ***.com zoominfo.com/c/ui-holdings-sdn-bhd/390203835 UiTM Holdings is the investment holding arm of Universiti Teknologi MARA (UiTM), Malaysias largest university. It commercialises the universitys assets and expertise across property, healthcare, education, and technology. Its primary mission is to generate sustainable revenue to support UiTMs academic and research programmes
Clínica Vida
June 12, 2026
•[ ransomware, healthcare ]
Clnica Vida was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Healthcare. Country: Brazil. Website: clinicavida.com. Healthcare Services
aisem.gob.bo
June 9, 2026
•[ ransomware, government, healthcare ]
aisem.gob.bo was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-06-09. Sector: Government & Defense. Country: Bolivia (Plurinational State of). Website: aisem.gob.bo. AISEM (Agencia de Infraestructura en Salud y Equipamiento Mdico) is a Bolivian government agency responsible for the d...
amc.org.au
June 12, 2026
•[ ransomware, healthcare, hack ]
amc.org.au was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-06-12. Sector: Healthcare. Country: Australia. Website: amc.org.au. The Australian Medical Council (AMC) is an independent national standards body responsible for the accreditation and assessment of medical education and training in Australia and New Zealand. Its primary purpose is to ensure that the standards of
Blue Nile Medical Center
May 27, 2026
•[ ransomware, healthcare ]
Blue Nile Medical Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-05-27. Sector: Healthcare. Country: United States of America. Website: bluenilemedical.com. More than 3000+ Patient's EHR Records
Centre Medical Crowley
June 15, 2026
•[ ransomware, healthcare, leak ]
Centre Medical Crowley was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Healthcare. Country: Canada. Website: crowleymd.ca. ***.ca zoominfo.com/c/centre-medical-crowley/1340359581 Crowley Medical Centre is a premier healthcare facility in Montreal, located just steps away from the McGill University Health Centre (MUHC). They provide comprehensive, specialized medical care across diverse fields, including family medicine, obstetrics, ophthalmology, and rheumatology, alongside advanced medical aesthetics. Their core mission is to deliver exceptional, patient-centered treatments using state-of-the-art technology within a welcoming and highly professional environment
Linnecken Partner
June 15, 2026
•[ ransomware, finance, healthcare ]
Linnecken Partner was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: Germany. Website: linnecken-partner.de. ***.de zoominfo.com/c/linnecken--partner/509433943 Linnecken & Partner is a renowned German tax and legal advisory firm based in Wentorf near Hamburg, proudly serving clients since 1977. They specialize exclusively in providing comprehensive tax consulting, financial planning, and legal services tailored specifically for healthcare professionals, doctors, and medical centers. With decades of niche expertise, the firm ensures that medical practitioners receive reliable support in navigating complex medical law, employment regulations, and business management
Ministarstvo zdravstva Republike Hrvatske
June 15, 2026
•[ ransomware, government, healthcare ]
Ministarstvo zdravstva Republike Hrvatske was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Government & Defense. Country: Croatia. Website: zdravlje.gov.hr. ***.gov.hr zoominfo.com/c/ministarstvo-zdravstva-republike-hrvatske/1339932847 The Ministry of Health of the Republic of Croatia is the central government authority responsible for shaping national health policies, regulating medical standards, and managing the public healthcare system. Through its official portal, it provides citizens with crucial public health guidelines, legislative updates, and secure access to modern digital e-Health services. Their primary mission is to protect population well-being, ensure equitable access to high-quality medical care, and continuously modernize the national health infrastructure
Enciso Ltda
June 15, 2026
•[ ransomware, healthcare, manufacturing ]
Enciso Ltda was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: Chile. Website: encisoltda.com. ***.com zoominfo.com/c/enciso-ltda/425799840 Enciso Ltda is a trusted Colombian company founded in 1999, specializing in the distribution of industrial safety equipment, medical supplies, and road signaling. Operating from Dosquebradas with four regional branches, they proudly serve over 5,000 clients nationwide. Their core mission is safeguarding workers' health and lives through premium protective equipment and reliable safety solutions
Misericórdia de Santo Tirso
June 16, 2026
•[ ransomware, healthcare ]
Misericrdia de Santo Tirso was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Healthcare. Country: Portugal. Website: www.iscmst.pt.
Golfview Developmental Center
June 16, 2026
•[ ransomware, healthcare ]
Golfview Developmental Center was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Healthcare. Country: United States of America. Website: www.golfview.org.
Novo Nordisk
June 16, 2026
•[ ransomware, healthcare ]
Novo Nordisk was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Healthcare. Country: Denmark. Website: novonordisk.com. [AI generated] Novo Nordisk is a Danish multinational pharmaceutical company headquartered in Bagsvrd, Denmark. Founded in 1923, it specializes in treatments for diabetes, obesity, hemophilia, and other chronic conditions. The company is a global leader in insulin production and develops drugs such as semaglutide. It operates in over 80 countries and is one of Europe's most valuable corporations by market capitalization.
Promepla
June 8, 2026
•[ ransomware, manufacturing, healthcare ]
Promepla was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Manufacturing. Country: Argentina. Website: www.promepla.com. Promepla is a Contract Design Manufacturer specializing in single-use plastic medical components and devices. They offer a comprehensive range of services including product design and development, prototyping, testing, quality assurance, cleanroom manufacturing, and sterilization. Their expertise caters to various sectors within the healthcare industry, providing customized solutions for medical device manufacturers. Promepla's commitment to quality is underscored by their ISO 13485 certification, ensuring rigorous control over every aspect of design and production.
He..t S..t.
June 16, 2026
•[ ransomware, healthcare ]
He..t S..t. was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-06-16.
He..t S..it.
June 17, 2026
•[ ransomware, healthcare ]
He..t S..it. was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-06-17.
brscappuccio.it
June 17, 2026
•[ ransomware, retail, healthcare ]
brscappuccio.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Retail & E-Commerce. Country: Italy. Website: brscappuccio.it. Headquartered in Casandrino, near Naples in the Campania region, the company specializes in the distribution and supply of medical devices,
Amazon owned OneMedical.com
June 18, 2026
•[ ransomware, healthcare, technology ]
Amazon owned OneMedical.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Website: OneMedical.com. Over 8.8TB of data was compromised. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 June 2026 | Warning: FINAL WARNING PAY OR LEAK
Horizon Family Medical Group
June 18, 2026
•[ ransomware, healthcare, financial ]
Horizon Family Medical Group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Horizon Family Medical Group
A deep dive into 7 terabytes of internal data: from patient records to QuickBooks financial databases
In the modern world, data is the new oil. For a medical organization like Horizon Family Medical Group, it is also the foundation of trust between doctor and patient. We have conducted an independent and complete audit of this organization's data security. The results are catastrophic. We are in possession of the company's entire digital footprint, totaling **7 terabytes**, which includes 1TB of file data and 6TB of mission-critical SQL and QuickBooks databases.
The management of Horizon Family Medical Group was notified of their complete loss of data control. They chose silence. This blog exists to illuminate what they are desperately trying to hide. We will not be publishing the files. Yet. Instead, we will explain exactly what this data contains, so that every patient, employee, and partner can appreciate the full scale of the threat.
The Patient, Dissected. What We Know About You
Horizon Family Medical Group prides itself on a wide range of services, from primary care to specialized treatments. This range of services has now become a detailed vulnerability map for every single patient. Our data includes, but is not limited to:
Primary Care: Complete visit histories, diagnoses, prescriptions, lab results, and physicians' private notes about your lifestyle, habits, and family status.
Women's Health: Detailed information on gynecological exams, pregnancies, abortions, Pap smear results, STD diagnoses, and prescribed treatments. Everything you trusted only to your doctor.
Behavioral Health: The most sensitive category. Diagnoses related to depression, anxiety disorders, bipolar disorder, and addiction. Full session notes from psychotherapists. Every antidepressant and antipsychotic prescription. This information can destroy careers, families, and social standing.
Allergy and Immunology: Data on all your allergies, including reactions to specific medications. What happens when this information is lost or altered in your official medical file?
Ophthalmology & Nutrition: Your eyeglass prescriptions, diagnoses like glaucoma and cataracts, as well as all your attempts to manage weight, documented eating disorders, and private recommendations from nutritionists.
This isn't just 'data'. This is your life, cataloged and ready for use.
Anatomy of a Business. A Financial Teardown of Horizon Family Medical Group
It's a paradox that clinics, while collecting mountains of information, often fail to see the real picture of their own business. We see it. The 6 terabytes of SQL and QuickBooks databases represent the complete financial and operational model of Horizon Family Medical Group.
We have analyzed:
SQL Databases: These contain complete patient information, doctor schedules, office utilization, patient flow, average revenue per department and per doctor. We know which doctor is profitable and which is a liability. We see every operational metric management uses to make decisions.
QuickBooks Databases: This is the financial heart of the company. Every transaction, employee salaries (including hidden executive bonuses), tax reports, debts, loans, and settlements with insurance companies and suppliers. We can see the true profit margin of every service, the customer acquisition cost (CAC), and their lifetime value (LTV).
Horizon's management hasn't just lost patient data. They have lost complete control of their business. Any competitor with this information could dismantle their company by poaching their most profitable doctors and patients.
Eternal Memory. Why This Data Will Never Disappear.
Some believe a data breach is a temporary problem. In this case, it is not. We drew inspiration from the Arctic Code Vault project, where humanity's most critical code is preserved in permafrost for a thousand years.
Your 7 terabytes of data are no longer just files on a server. They have been prepared for archival and distributed storage. They will become a digital monument to the negligence of Horizon Family Medical Group. This data cannot be 'deleted'. It will exist forever, as proof that the company's leadership failed to protect what is most sacredyour health and your privacy.
To the management of Horizon Family Medical Group, we remind you: the clock is ticking. Your silence only magnifies the damage. Contact us. Your patients and your business deserve it.
www.eastersealsia.org
June 18, 2026
•[ ransomware, healthcare, leak ]
www.eastersealsia.org was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Website: www.eastersealsia.org. Easterseals Iowa provides an Assistive Technology Program that supports Iowans of all ages with disabilities, including the aging population, in finding and utilizing assistive technology to enhance their daily lives. Their services include personalized consultations, a demonstration center, a lending library, and access to durable medical equipment. They also offer education and training opportunities, both in-person and online, to help individuals understand and obtain the necessary devices. The program aims to promote independence and improve the quality of life for individuals with disabilities across Iowa.
