St James' Anglican School
September 15, 2026
•[ ransomware, hack, education ]
Hackers accessed systems at St James' Anglican School in Perth, Western Australia, copying current and former students' and families' personal data, incl. bank details, medical records and photos. The school said it contained the incident; ThreeAM ransomware claimed it.
East Suffolk and North Essex NHS Foundation Trust
September 27, 2026
•[ insider, healthcare ]
East Suffolk and North Essex NHS Foundation Trust (England) said staff viewed the digital medical records of Noah Woods, a 3-year-old who died in September 2026, without authorization; ten staff were removed from duty or suspended and the ICO was notified.
Isapre Consalud
November 2, 2026
•[ ransomware, healthcare ]
Isapre Consalud was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: Chile. Website: www.consalud.cl.
Northern Counties Health Care
October 1, 2026
•[ ransomware, healthcare ]
Northern Counties Health Care was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Healthcare. Country: United States of America. Website: nchcvt.org. With five community Health Centers, two dental centers, and a certified Home Health Care & Hospice division, NCHC provides health care services to patients throughout Vermont
Guardian Pharmacy LLC
October 1, 2026
•[ ransomware, healthcare ]
Guardian Pharmacy LLC was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Healthcare. Country: United States of America. Hacked; more news coming soon. . .
Vera Science
September 30, 2026
•[ ransomware, healthcare, technology ]
Vera Science was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Healthcare. Country: United States of America. Website: veroscience.com. A Biotechnology Company
parkdental.com
October 1, 2026
•[ ransomware, healthcare ]
parkdental.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Healthcare. Country: United States of America. Website: parkdental.com. To the Management of Park Dental:
Time is running out. Our previous attempts to establish a constructive dialogue regarding the security breach have been met with silence.
If the management of Park Dental fails to get in touch with our team within the next 24 hours, we will proceed with the full p
Forma Therapeutics Holdings, Inc.
September 21, 2026
•[ ransomware, healthcare, leak ]
Forma Therapeutics Holdings, Inc. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: www.novonordisk.com. - Clinical Trial & Statistical Data- Electronic Lab Notebooks & Research IP- Drug Discovery & Pipeline Data- Biological Research & Genomic Data
daralteb.com
October 4, 2026
•[ ransomware, healthcare, leak ]
daralteb.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Healthcare. Country: Iran. Website: daralteb.com. Dar Al-Tib is one of Egypt's and the Middle East's first and leading centers specializing in infertility treatment and a...
Nipigon District Memorial Hospital
October 4, 2026
•[ ransomware, healthcare ]
Nipigon District Memorial Hospital was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Healthcare. Country: Canada. Nipigon District Memorial Hospital offers a range of healthcare services including diagnostic imaging, lab services, physiotherapy, and an assisted living program. The hospital aims to serve patients and residents in the Nipigon district, focusing on community health and well-being. They also provide specialized services such as Ontario Telemedicine Services and Meals on Wheels. The hospital is committed to strategic planning for future healthcare needs, as outlined in their CARE 2030 initiative.
The company headquarters is located in 125 Hogan Road, Nipigon, ON P0T 2J0, Canada. 51-200 Employees
JPS Health Network
September 5, 2026
•[ ransomware, healthcare ]
JPS Health Network was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Healthcare. Country: United States of America. Website: www.jpshealthnet.org. John Peter Smith Hospital, JPS Surgical Center - Arlington, a network of community-based health centers, school-based health centers and psychiatric services at Trinity Springs Pavilion - a stand-alone facility.
fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie
November 1, 2026
•[ ransomware, healthcare, technology ]
fzmb GmbH, Forschungszentrum fr Medizintechnik und Biotechnologie was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Healthcare. Country: Germany. Website: www.fzmb.de.
Laboratorios Roemmers SAICF
October 1, 2026
•[ ransomware, healthcare, manufacturing ]
Laboratorios Roemmers SAICF was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Healthcare. Country: Argentina. Website: roemmers.com.ar. Laboratorios Roemmers SAICF Argentina's #1 pharmaceutical company by revenue, with 1.669 billion in consolidated turnover, 6,890 employees, and 69 subsidiaries across 11 countries.
The exposed material includes:
4,207 employees' national identity numbers (CUIL) Argentina's equivalent of a Social Security Number combined with dates of birth, health insurance affiliations, and employer identifiers. A complete identity-theft package for the entire Argentine workforce.
Psychotropic drug dispensing records employee-by-employee tracking of who receives clonazepam, alprazolam, diazepam, and other psychiatric medications from the company nursing station. The most sensitive category: mental health data.
COVID-19 health tracking with clinical symptoms individual symptom logs, doctor's notes, quarantine dates, and return-to-work clearances for employees who tested positive.
Pre-employment medical exam results with full DNI (national identity document) numbers.
82 GB of drug formulations the complete pharmaceutical IP portfolio covering every product Roemmers manufactures, from API synthesis methods to finished-form specifications.
193 MB of API supplier qualification dossiers for 30+ international suppliers including CERBIOS (Switzerland), revealing the entire supply chain.
14 GB of internal drug pricing strategy and competitive intelligence
Rimrock Foundation
October 1, 2026
•[ ransomware, healthcare ]
Rimrock Foundation was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Other. Country: United States of America. Website: rimrock.org. Rimrock is the largest drug and alcohol addiction treatment center in the region, offering a comprehensive range of services for adults dealing with substance use and co-occurring disorders. The organization approaches addiction as a holistic illness that affects an individual's emotional, physical, spiritual, and social well-being. Their innovative and compassionate care includes various treatment options such as inpatient and outpatient programs, counseling services, and specialized therapies. Rimrock aims to create opportunities for recovery and balance in the lives of those impacted by addiction and mental illness.
Raleigh Family Medicine
October 2, 2026
•[ ransomware, healthcare ]
Raleigh Family Medicine was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: www.rfppa.com. Hospitals and Health Care Stolen data: 1 GB.
MorseLife Health System, Inc.
October 2, 2026
•[ ransomware, healthcare ]
MorseLife Health System, Inc. was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Healthcare. Country: United States of America. Website: www.morselife.org. Hospitals and Health Care Stolen data: 344 GB.
Praxis EMR
September 17, 2026
•[ ransomware, healthcare, technology ]
Praxis EMR was listed as a victim on the leak site of the insomnia ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Healthcare. Country: United States of America. Website: www.praxisemr.com. Praxis EMR is a highly rated EHR for physicians and medical providers, using AI to boost efficiency and accuracy. It lets clinicians document in their own words, improving usability, satisfaction, and time spent on patient care.
Medical Data Rx
September 5, 2026
•[ ransomware, healthcare, technology ]
Medical Data Rx was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Healthcare. Country: United States of America. Website: www.tsgpc.com. Technical Solutions Group, located in the heart of Mid-Michigan, is dedicated to assisting small businesses with their technology, advertising, and networking requirements. Their mission is to equip offices with top-quality computers, technology services, advertising solutions, and networking solutions to enhance workflow efficiency and cost-effectiveness. They offer PC and hardware sales, IT networking solutions, IT management and technical support, and server hosting services. With a focus on client satisfaction, they have a proven track record of delivering reliable support and solutions to businesses in need.
Company #114
November 2, 2026
•[ ransomware, healthcare ]
Company #114 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-02. Country: United States of America. biopharmaceutical United States | [PENDING EXPOSURE]
ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C
October 1, 2026
•[ ransomware, healthcare ]
ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Healthcare. Country: United States of America. Website: www.gastrocny.com. Medical Practices Stolen data: 70 GB.
