« All threats

Ransomware in the Healthcare sector

In the last 12 months, 373 organisations in Healthcare have been claimed by ransomware groups, 84 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Victims, last 12 months373
Last 30 days84
Confirmed by press0

Explore with filters →🔔 Get alerts for Healthcare

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 260
  6. Apr 2630
  7. May 2654
  8. Jun 2654
  9. Jul 2660
  10. Aug 2689
  11. Sep 2686
  12. Oct 260

Most active groups (12 months)

  1. Qilin37
  2. The Gentlemen36
  3. Anubis17
  4. INC Ransom15
  5. Lockbit514
  6. Direwolf13
  7. Krybit13
  8. Storm12
  9. Genesis12
  10. Pear11

Most affected countries

  1. United States177
  2. Canada9
  3. India7
  4. Brazil6
  5. France5
  6. Argentina5
  7. Italy4
  8. United Kingdom4
  9. Netherlands4
  10. Indonesia3

Recent victims

OrganisationGroupCountryClaimedStatus
Houston Thyroid & Endocrine SpecialistsN0nUnited States9/30/2026◌ Claimed (unverified)
Centre National de l'Expertise Hospitalière (CNEH)KairosFrance9/30/2026◌ Claimed (unverified)
West County Health CentersStormUnited States9/30/2026◌ Claimed (unverified)
Pulmonary Services GroupThe GentlemenPuerto Rico9/29/2026◌ Claimed (unverified)
Gibson Area Hospital & Health ServicesWallstreetUnited States9/29/2026◌ Claimed (unverified)
Newyjh HospitalUloseSouth Korea9/29/2026◌ Claimed (unverified)
Northeast RehabBrain Cipher—9/29/2026◌ Claimed (unverified)
Northern New Jersey Eye InstituteThe GentlemenUnited States9/29/2026◌ Claimed (unverified)
Custom Rx ShoppeThe GentlemenUnited States9/29/2026◌ Claimed (unverified)
Carolina AsthmaChaosUnited States9/29/2026◌ Claimed (unverified)
Ever Ready First AidPlay—9/28/2026◌ Claimed (unverified)
New World DiagnosticsQilin—9/28/2026◌ Claimed (unverified)
The Center for Kidney CareInterlockUnited States9/28/2026◌ Claimed (unverified)
VigiliaGlobal Cybernetic Collective—9/28/2026◌ Claimed (unverified)
Friendly Senior LivingShibaUnited States9/28/2026◌ Claimed (unverified)
Children's Memorial HospitalSafepayPhilippines9/28/2026◌ Claimed (unverified)
Coosalud EPS3amColombia9/28/2026◌ Claimed (unverified)
SMCarePanzerUnited Kingdom9/28/2026◌ Claimed (unverified)
Instituto de OjosKillsec3Puerto Rico9/27/2026◌ Claimed (unverified)
Suiza LabKillsec3Peru9/27/2026◌ Claimed (unverified)
ScanboKillsec3Canada9/27/2026◌ Claimed (unverified)
Hudson MD Group LLCMetaencryptorUnited States9/26/2026◌ Claimed (unverified)
Platinum Healthcare StaffingMetaencryptorUnited States9/26/2026◌ Claimed (unverified)
Morula IVFEverest—9/25/2026◌ Claimed (unverified)
Breast Implant Center of HawaiiWallstreetUnited States9/25/2026◌ Claimed (unverified)
Westside GIPearUnited States9/24/2026◌ Claimed (unverified)
Indroj Medical Group Inc.PearUnited States9/24/2026◌ Claimed (unverified)
Arizona Vascular Medical Equipment, IncDragonforceUnited States9/24/2026◌ Claimed (unverified)
Anery Home CareLockbit5Brazil9/23/2026◌ Claimed (unverified)
Smart Eye CareBooba TeamUnited States9/23/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.