Hospital Hermilio Valdizán
August 21, 2026
•[ ransomware, healthcare, leak ]
Hospital Hermilio Valdizn was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: Peru. Website: www.hhv.gob.pe. HHV public psychiatric hospital in Lima, Peru, operated by MINSA. It provides specialized mental health services, including inpatient and outpatient psychiatric care, psychotherapy, rehabilitation, and neurology. Its main clients are low-income patients, many covered by SIS.
EdgeEndo® USA
October 2, 2026
•[ ransomware, healthcare ]
EdgeEndo USA was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: www.edgeendo.com. Medical Device Stolen data: 103 GB.
O2 Dental Group
October 5, 2026
•[ ransomware, healthcare ]
O2 Dental Group was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Healthcare. Country: United States of America. Website: o2smiles.com. O2 Dental Group of Wilmington makes your dental care easy by providing a variety of family dentistry services under one roof! As a dental provider, O2 Dental Group is subject to strict privacy protections, primarily the Health Insurance Portability and Accountability Act (HIPAA) in the United States, but they have not complied with security measures, resulting in compromised patient health records (PHI), billing and insurance documents, consent and authorization forms.
Company #117
November 2, 2026
•[ ransomware, finance, healthcare ]
Company #117 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-02. Country: United States of America. dental insurance United States | [PENDING EXPOSURE]
TLC Perinatal
September 30, 2026
•[ ransomware, healthcare ]
TLC Perinatal was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. Website: tlcperinatal.com. A provider of healthcare services.
St. Francis Healthcare Systems of Hawaii
October 3, 2026
•[ ransomware, healthcare ]
St. Francis Healthcare Systems of Hawaii was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Healthcare. Country: United States of America. Website: stfrancishawaii.org. St. Francis Healthcare System of Hawaii is a Catholic, nonprofit healthcare organization that has served Hawaii families since 1927
Global AirFreight International
October 8, 2026
•[ ransomware, technology, healthcare ]
Global AirFreight International was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Transportation. Country: Singapore. Website: www.globalair.com.sg. Global Airfreight International is a logistics solution provider specializing in air freight, ocean freight, cross-border trucking, and contract logistics. They cater to various industries including aerospace, healthcare, technology, and general cargo, offering services such as temperature-controlled solutions and project cargo management. The company focuses on delivering high standards of service and innovative solutions to meet customer requirements. Their clients include businesses in need of reliable and efficient supply chain solutions for critical shipments.
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates
October 8, 2026
•[ ransomware, healthcare ]
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Healthcare. Country: United States of America. Website: www.magopsa.com. Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates (MAGOPSA) is one of the largest single groups of gynecologic oncologists in the mid-Atlantic region.
Medcom Tech Information
July 15, 2026
•[ ransomware, healthcare ]
Medcom Tech Information was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-15. Sector: Healthcare. Country: Spain. Website: medcomtech.es/en. [AI generated] N/A
I don't have verified, reliable information about a specific company named "Medcom Tech Information." Providing fabricated details about its operations, industry, or country would risk being inaccurate for threat intelligence purposes. If you have additional contextsuch as a website, registration details, or region of operationI can help verify or research further.
enTouch
October 9, 2026
•[ ransomware, technology, healthcare ]
enTouch was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Technology. Country: Japan. Website: entouch.jp. enTouch is a Japanese IT company specializing in the medical and pharmaceutical sectors, providing services for online consultations, sales activities, and customer data management between pharmaceutical companies and medical institutions. We possess the entire database from data.entouch.jp, the data analysis system used by enTouch. The database contains sensitive customer information, including names, contact details, consultation schedules and records, and sales activity data categorized by pharmaceutical company.
MercyMed of Columbus
October 6, 2026
•[ ransomware, healthcare ]
MercyMed of Columbus was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. Website: mercymedcolumbus.com. mercymedcolumbus.com zoominfo.com/c/mercymed-of-columbus/409041268 MercyMed of Columbus, Inc. is a 501(c)(3) nonprofit community health center founded in 2011 by Dr. Grant Scarborough, MD in Columbus, Georgia, serving uninsured and low-income patients across 4 clinics. It employs 3285 staff plus ~150 volunteers and generated ~$2.53.9M in revenue (2024), providing $1.51.7M in free care annually with 80 of every dollar going directly to programs. In 2024 it served 7,000+ patients with 20,729 primary care visits, 3,799 dental visits, and 1,566 prescriptions filled, including through its own in-house pharmacy (opened 2024). Services span family medicine, pediatrics, dentistry, ophthalmology, physical therapy, mental health counseling, and nutrition with sliding-scale fees starting at $35/visit and completely free care for the homeless. A standout program is MercyMed Farm (since 2018), producing 18,000 lbs of organic vegetables/year for patients through SNAP-matched
Saskatoon Tribal Council
October 5, 2026
•[ ransomware, government, healthcare ]
Saskatoon Tribal Council was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-05. Sector: Government & Defense. Country: Canada. Website: sktc.sk.ca. sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $1417M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada.
Company #21
October 11, 2026
•[ ransomware, healthcare ]
Company #21 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
brookslawfirm.com
October 12, 2026
•[ ransomware, leak, healthcare ]
brookslawfirm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: brookslawfirm.com. personal data 8200 client hippa etc
MarieBelle New York
October 13, 2026
•[ ransomware, retail, healthcare ]
MarieBelle New York was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Country: United States of America. confectionery & telehealth (US) New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID EXPOSED]
Zenidoc
October 13, 2026
•[ ransomware, healthcare, technology ]
Zenidoc was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.
TheraCare
October 6, 2026
•[ ransomware, healthcare, leak ]
TheraCare was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. TheraCare is a multi-service healthcare, rehabilitation, developmental, and educational organization founded in 1991 and headquartered in New York. The company provides clinical and educational services for children, families, and clients of different ages across New York, New Jersey, Connecticut, and Maryland. Its key services include early intervention, autism services, preschool and school-age programs, speech-language therapy, occupational therapy, physical therapy, special education, behavioral services, and school district staffing. TheraCare focuses on helping children reach their developmental and educational potential through individualized clinical and educational programs. The organization emphasizes quality assurance, continuous improvement, regulatory compliance, and measurable service outcomes.
The company headquarters is located in 1133 Westchester Avenue, Suite N-230, White Plains, NY 10604, United States. 201-500 Employees
Cooperative Des Techniciens Ambulanciers De La Monte
October 7, 2026
•[ ransomware, healthcare ]
Cooperative Des Techniciens Ambulanciers De La Monte was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: Canada. CETAM is the largest employer in prehospital care in Montrgie, comprising over 400 ambulance technicians and paramedics. Founded in 1988, it operates on a cooperative model where all workers are members, allowing them to participate in decision-making and benefit from annual financial returns. The organization serves a wide territory, responding to nearly 20,000 calls annually across multiple municipalities. CETAM is dedicated to providing high-quality emergency medical services to the local population.
The company headquarters is located in 310 Rue Lawrence, Greenfield Park, QC J4V 2Z6, Canada. 201-500 Employees
bayer
October 9, 2026
•[ ransomware, healthcare ]
bayer was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Germany. Website: www.bayer.com/en. Bayer is a global life science company with more than 160 years of innovation behind us. Operating at the intersection of health and nutrition, we are committed to addressing some of society's most pressing challenges and creating lasting value for people, communities, and the world around us.
Riviera Healthcare Center
October 7, 2026
•[ ransomware, healthcare ]
Riviera Healthcare Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: https:rivierahealthcare.com. Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protected health information (PHI)names, diagnoses, medical histories, fall/fracture and treatment information, payment records, and employee/HR data. This breach violates HIPAA and the California CMIA (and potentially the CCPA/CPRA) and will result in mandatory breach notification, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.
