Deese and Locklear Chiropractic Center
July 12, 2026
•[ ransomware, healthcare ]
Deese and Locklear Chiropractic Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Healthcare. Country: United States of America. [AI generated] N/A
I don't have reliable, verifiable information about a specific company called "Deese and Locklear Chiropractic Center." While this sounds like it could plausibly be a small, local chiropractic practice (based on the naming convention, likely in the United States, possibly the Carolinas given the surname "Locklear"), I cannot confirm its existence, operations, or details with confidence, and providing fabricated information would not be appropriate for threat intelligence purposes.
iDentalSoft
October 9, 2026
•[ ransomware, healthcare, technology ]
iDentalSoft was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Brazil. Website: www.identalsoft.com. iDentalSoft offers a cloud-based dental practice management software that is secure, modern, and designed for efficiency. The software provides comprehensive features such as smart scheduling, advanced clinical charting, and patient communication tools, making it suitable for both single and multi-practice management.
idi pharma
October 9, 2026
•[ ransomware, healthcare ]
idi pharma was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Spain. Website: www.idipharma.com. idi pharma is an Italian pharmaceutical company specializing in the research and development of innovative nutraceuticals and medical devices. The company focuses on formulations covered by patents and unique dosage technologies to improve patient health and quality of life (but their data leak).
Gress Clark Young & Schoepper
October 10, 2026
•[ ransomware, technology, healthcare ]
Gress Clark Young & Schoepper was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Professional Services. Country: United States of America. Website: gressandclarklaw.com. Gress Clark Young & Schoepper 167,804 files / ~166.4 GBBanking details - of the firm and its clients.SSNs + signatures of clients/witnesses; W-9, I-9 forms with DL/SSN card copies; W-4 forms.BIIA case-management procedures (Board of Industrial Insurance Appeals): default orders (Order of Default), internal 'Conference Questions', consulting-fee payments to experts.Firm finances: the firm's QuickBooks company file, VOID checks bearing signatures, expert-payment records, SaaS invoices.Medical photos and imaging; hundreds of pages of PHI/APF (Activity Prescription Forms) - X-rays, complete medical records.'Coaching' letters to doctors - including a letter to the physician in the Jachacy matter with wording indicative of steering a medical opinion ('coaching letter') - a potential ethics violation regarding witness handling.Credentials/access to the SPC e-file system (court e-filing).Disciplinary action against partner Daniel W. Gress. More
Company #19
October 11, 2026
•[ ransomware, healthcare, retail ]
Company #19 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. confectionery & telehealth New York, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC]
Watermark Retirement Communities
August 24, 2026
•[ ransomware, healthcare, leak ]
Watermark Retirement Communities was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Healthcare. Country: United States of America. Website: watermarkcommunities.com. [AI generated] Watermark Retirement Communities is a U.S.-based senior living company that develops, manages, and operates retirement communities offering independent living, assisted living, memory care, and skilled nursing services. Headquartered in Tucson, Arizona, it operates numerous communities across the United States. The company belongs to the senior care and hospitality-adjacent real estate industry, focusing on resident-centered lifestyle programming and care.
Potomac Animal Hospital
October 6, 2026
•[ ransomware, healthcare ]
Potomac Animal Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. Website: potomacanimalhospital.com. potomacanimalhospital.com zoominfo.com/c/potomac-animal-hospital/183255483 Potomac Animal Hospital is a family-owned, full-service small animal medical and surgical facility at 10020 River Road in Potomac, Maryland, an affluent Washington, DC suburb, founded in 1973 and led since 1983 by Air Force veteran Dr. Michael Scott (CSU DVM 1969; former officer in charge of the Europe Military Working Dog Referral Center in Ramstein). His son Dr. Jason Scott joined in 1999 hooded at graduation by his father exactly 30 years to the day after his own and now leads a team including Dr. Sarah Orloff (2021) and Dr. Kimber Wagner (2025); Dr. Michael retired in 2018 but remains owner. Beyond medicine (wellness exams, international health certificates, laser surgery, dentistry with digital oral radiography, in-house lab), the hospital runs a separate boarding kennel ($42.50$72.50/night, dogs exercised every 23 hours, VIP suites) and a grooming salon all powered through outages by an industria
astranahealth.com
October 9, 2026
•[ ransomware, healthcare, technology ]
astranahealth.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: United States of America. Website: astranahealth.com. The company's management decided to pull out of the deal with us in order to save money. The data and diagnoses of millions of patients have been published in their entirety. The total data volume is 1,500 GB.
Astrana Health, Inc. is a physician-centric, technology-powered healthcare company headqu
CDA
July 8, 2026
•[ ransomware, healthcare ]
CDA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-08. Internal domain: CDA.local. Servers encrypted. 100,000+ DICOM files extracted from medical imaging archive. Patient names, IDs, birth dates, study descriptions, and referring physicians are present...
INI Fiocruz
July 7, 2026
•[ ransomware, healthcare, government ]
INI Fiocruz was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Healthcare. Country: Brazil. Website: www.ini.fiocruz.br. [AI generated] INI Fiocruz refers to the Instituto Nacional de Infectologia Evandro Chagas, a research and hospital unit of the Oswaldo Cruz Foundation (Fiocruz) in Brazil. It operates in the healthcare and biomedical research industry, specializing in infectious disease treatment, clinical research, and public health initiatives. Based in Rio de Janeiro, Brazil, it is a government-affiliated institution under the Ministry of Health, contributing to disease surveillance, vaccine studies, and medical training programs.
Mynd
October 9, 2026
•[ ransomware, healthcare ]
Mynd was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Property owners personal data.
North Philadelphia Health System
October 7, 2026
•[ ransomware, healthcare ]
North Philadelphia Health System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: bewellctr.org. bewellctr.org zoominfo.com/c/north-philadelphia-health-system/27968159 The Behavioral Wellness Center at Girard ("Be Well") is a nonprofit addiction and psychiatric treatment provider at 801 W. Girard Ave, Philadelphia, with revenue growing from $38.8M (FY2019) to a record $63.4M (FY2025, 95% from program services), though it posted a $4.4M loss in FY2024 and carries $68.7M in liabilities. Tracing its roots to the 1896 Philadelphia Children's Homeopathic Hospital, it survived a 1990 merger of two bankrupt hospitals, closed St. Joseph's in 2016, filed Chapter 11 that December, and emerged in 2018 after selling its real estate ($8.45M Girard campus sale to Iron Stone) while saving ~500 jobs. Today it employs ~480 staff and runs one of Philadelphia's oldest and largest methadone programs (Goldman Clinic, ~600 clients/day, ~217,000 visits/year), plus detox, residential, and 85 extended-acute psychiatric beds.
DW McMillan Memorial Hospital
September 21, 2026
•[ ransomware, healthcare ]
DW McMillan Memorial Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: dwmmh.org. dwmmh.org zoominfo.com/c/dw-mcmillan-memorial-hospital/77170917 D.W. McMillan Memorial Hospital is a small rural hospital in Brewton, Alabama, operating since 1954. It provides a 24/7 emergency room, ICU, surgery, obstetrics, outpatient chemotherapy, lab, imaging, and rehabilitation serving as the main acute-care provider for the county. It has about 3949 beds and employs roughly 85 staff, generating approximately $15 million in annual revenue. The hospital is part of a small county healthcare system that also runs clinics, EMS, and home health services. It has faced serious financial pressure a $6 million deficit but survived after county voters approved a tax increase in December 2025 expected to bring ~$1.8 million per year starting 2027.
hsc.mb.ca
October 10, 2026
•[ ransomware, healthcare, leak ]
hsc.mb.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: Canada. Website: hsc.mb.ca. The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facilitys operations, recognizing the potentially devastating consequences that such an action could have had on patients lives and health.
Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise.
The data included, but was not limited to, the following information:
Patient medical records:
Full name, date of birth, address and phone number
Hospital medical record number
Diagnoses, medical history, allergies and medications
Laboratory results, imaging reports
Appointment dates, treatment details and physician information.
Employee and healthcare professional information:
Names, contact details, dates of birth and employee numbers
Employment, payroll and banking information
Professional credentials, work schedules and departmental assignments.
Financial and insurance information:
Billing records and payment histories
Insurance or benefits claim information.
Confidential hospital documents:
Internal emails and staff communications
System configurations, network diagrams and security procedures
Database backups and exported spreadsheets.
We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
Company #27
October 11, 2026
•[ ransomware, healthcare ]
Company #27 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Healthcare. Country: Australia. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
Concord Eye Center
October 12, 2026
•[ ransomware, healthcare, leak ]
Concord Eye Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Healthcare. Country: United States of America. Website: http:www.concordeyecenternh.com. A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.
Pedigo Products, Inc.
October 12, 2026
•[ ransomware, manufacturing, healthcare ]
Pedigo Products, Inc. was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:pedigo-usa.com. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, copying by competitors, loss of business with hospitals and dealers, and serious reputational and financial damage.
Company #64
October 13, 2026
•[ ransomware, healthcare ]
Company #64 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. dental laboratory (CAD/CAM) Missouri, USA | [PENDING EXPOSURE]
Danvikshem (Stiftelsen Danviks Hospital)
October 13, 2026
•[ ransomware, healthcare ]
Danvikshem (Stiftelsen Danviks Hospital) was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Healthcare. Country: Sweden. A Swedish foundation that operates elder-care services, including residential care at Danvikshem in Nacka
CureMetrix, Inc.
September 21, 2026
•[ ransomware, healthcare, technology ]
CureMetrix, Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: curemetrix.com.
