Ransomware in the Healthcare sector
In the last 12 months, 373 organisations in Healthcare have been claimed by ransomware groups, 84 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.
Victims, last 12 months373
Last 30 days84
Confirmed by press0
Explore with filters →🔔 Get alerts for Healthcare
Victims per month
- Nov 250
- Dec 250
- Jan 260
- Feb 260
- Mar 260
- Apr 2630
- May 2654
- Jun 2654
- Jul 2660
- Aug 2689
- Sep 2686
- Oct 260
Most active groups (12 months)
- Qilin37
- The Gentlemen36
- Anubis17
- INC Ransom15
- Lockbit514
- Direwolf13
- Krybit13
- Storm12
- Genesis12
- Pear11
Most affected countries
Recent victims
| Organisation | Group | Country | Claimed | Status |
|---|---|---|---|---|
| Houston Thyroid & Endocrine Specialists | N0n | United States | 9/30/2026 | ◌ Claimed (unverified) |
| Centre National de l'Expertise Hospitalière (CNEH) | Kairos | France | 9/30/2026 | ◌ Claimed (unverified) |
| West County Health Centers | Storm | United States | 9/30/2026 | ◌ Claimed (unverified) |
| Pulmonary Services Group | The Gentlemen | Puerto Rico | 9/29/2026 | ◌ Claimed (unverified) |
| Gibson Area Hospital & Health Services | Wallstreet | United States | 9/29/2026 | ◌ Claimed (unverified) |
| Newyjh Hospital | Ulose | South Korea | 9/29/2026 | ◌ Claimed (unverified) |
| Northeast Rehab | Brain Cipher | — | 9/29/2026 | ◌ Claimed (unverified) |
| Northern New Jersey Eye Institute | The Gentlemen | United States | 9/29/2026 | ◌ Claimed (unverified) |
| Custom Rx Shoppe | The Gentlemen | United States | 9/29/2026 | ◌ Claimed (unverified) |
| Carolina Asthma | Chaos | United States | 9/29/2026 | ◌ Claimed (unverified) |
| Ever Ready First Aid | Play | — | 9/28/2026 | ◌ Claimed (unverified) |
| New World Diagnostics | Qilin | — | 9/28/2026 | ◌ Claimed (unverified) |
| The Center for Kidney Care | Interlock | United States | 9/28/2026 | ◌ Claimed (unverified) |
| Vigilia | Global Cybernetic Collective | — | 9/28/2026 | ◌ Claimed (unverified) |
| Friendly Senior Living | Shiba | United States | 9/28/2026 | ◌ Claimed (unverified) |
| Children's Memorial Hospital | Safepay | Philippines | 9/28/2026 | ◌ Claimed (unverified) |
| Coosalud EPS | 3am | Colombia | 9/28/2026 | ◌ Claimed (unverified) |
| SMCare | Panzer | United Kingdom | 9/28/2026 | ◌ Claimed (unverified) |
| Instituto de Ojos | Killsec3 | Puerto Rico | 9/27/2026 | ◌ Claimed (unverified) |
| Suiza Lab | Killsec3 | Peru | 9/27/2026 | ◌ Claimed (unverified) |
| Scanbo | Killsec3 | Canada | 9/27/2026 | ◌ Claimed (unverified) |
| Hudson MD Group LLC | Metaencryptor | United States | 9/26/2026 | ◌ Claimed (unverified) |
| Platinum Healthcare Staffing | Metaencryptor | United States | 9/26/2026 | ◌ Claimed (unverified) |
| Morula IVF | Everest | — | 9/25/2026 | ◌ Claimed (unverified) |
| Breast Implant Center of Hawaii | Wallstreet | United States | 9/25/2026 | ◌ Claimed (unverified) |
| Westside GI | Pear | United States | 9/24/2026 | ◌ Claimed (unverified) |
| Indroj Medical Group Inc. | Pear | United States | 9/24/2026 | ◌ Claimed (unverified) |
| Arizona Vascular Medical Equipment, Inc | Dragonforce | United States | 9/24/2026 | ◌ Claimed (unverified) |
| Anery Home Care | Lockbit5 | Brazil | 9/23/2026 | ◌ Claimed (unverified) |
| Smart Eye Care | Booba Team | United States | 9/23/2026 | ◌ Claimed (unverified) |
Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.
Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.