Industry sector

Ransomware attacks on the Healthcare sector

Ransomware groups have listed 2,523 Healthcare organisations on their leak sites since January 2022; the latest post is from 9 September 2026. Most active groups: Qilin, Lockbit3 and Incransom. Most affected countries: United States, India and Australia.

Total posts 2,523
First seen 2022-01-06
Latest post 2026-09-09
Groups 191

Most active groups

  1. Qilin 195
  2. Lockbit3 145
  3. Incransom 138
  4. Bianlian 93
  5. Ransomhub 81
  6. Clop 76
  7. Thegentlemen 73
  8. Alphv 69
  9. Everest 63
  10. Medusa 63
All groups →

Most affected countries

  1. United States 1,158
  2. India 64
  3. Australia 61
  4. United Kingdom 60
  5. Germany 59
  6. Canada 57
  7. Brazil 51
  8. France 47
  9. Spain 32
  10. Italy 32
All countries →

Healthcare ransomware victims per year

187 2022
426 2023
659 2024
639 2025
612 2026

Latest 100 victims

Search every post in the full table.
Victim Group Country Discovered
PharmaEssentia Corporation Thegentlemen Taiwan
amorsaude.com.br Lockbit5 Brazil
palmettoeyeinstitute.com Safepay United States
recoverycafe.org Safepay United States
NorthShore Health Centers Insomnia United States
Wellness Partners network(combined revenue) Incransom United States
Hologic, Inc. Metaencryptor United States
Medela.com Shinyhunters Switzerland
eAssist Dental Solutions Direwolf United States
evergenbio.com Chaos United States
myLaurel Direwolf United States
Mission Pet Health Direwolf United States
Zdrowit Thegentlemen Poland
Veradigm Thegentlemen United States
Kovo Healthtech Corp Pear United States
kalahealth.eu Lockbit5 Germany
huisartsencentrumkleiniterson.nl Lockbit5 Netherlands
Studio Oculistico Ciraci Spacebears Italy
ligacancerguate.org Krybit Guatemala
int.diasorin.com Settra Italy
medevolve.com Settra United States
neolife.com Settra United States
SITES Medical Storm United States
Policlinico Triestino Incransom Italy
Proliance Surgeons Payoutsking United States
Nutex Health Thegentlemen United States
seashellhospital.com Krybit India
ccsperfusion.com BrainCipher United States
New Century Ophthalmology Group Incransom United States
Metro Tulsa Foot Insomnia United States
Cedar County Memorial Hospital Wallstreet United States
Erdem Hospital Direwolf Turkey
Hospital Clnico Universidad de Chile Direwolf Chile
Globus Medical Falcon United States
Crystalpharmatech Qilin —
Exacta Optech Labcenter Thegentlemen Brazil
CareClinics Qilin Malaysia
McKesson Corporation Shinyhunters United States
Elekta AB Shinyhunters Sweden
Valley Health Team Rhysida —
Hangzhou Qihan Biotech Co., Ltd. Global China
ProCare Moneymessage United States
tnmed.org Lockbit5 United States
Caduceus Medical Group Anubis —
Our Hospice Of South Central Indiana Storm United States
theheartcenterofmemphis.com Lockbit5 United States
Health Medusalocker Australia
NEXT LEVEL MEDICAL, LLC Pear United States
Sanatorio Modelo de Caseros Qilin Argentina
karkinos.in Krybit India
www.neooftalmo.com.br Krybit Brazil
jindallifescience.com Krybit India
Oral and Maxillofacial Surgery Akira —
National Kidney Registry Direwolf United States
Dentist in New Britain, CT Dark Project United States
Hospitality Health ER (Longview) Genesis United States
PappyJoe: Healthcare Management System Kazu United States
Instituto Ferrero de Neurología y Sueño Kazu Argentina
Brazil Mobilemed: Cloud PACS Platform Kazu Brazil
PawlyClinic: Digital Veterinary Care Platform Kazu United States
Dr Akbar Niazi Teaching Hospital Kazu Pakistan
Centro Médico Especializado OSI: Healthcare Solutions Kazu Mexico
Meducar: Telemedicine and Patient Management System Kazu Brazil
ConsultorioMovil: Telemedicine and Healthcare System Kazu Mexico
MPA Pharma GmbH Metaencryptor Germany
Skyline Implants & Periodontics Barracuda United States
Clinical Associates of the Finger Lakes (CAFL) Barracuda United States
Pinnacle Hospital Storm United States
Crystal Pharmatech Eclipse United States
Eyecare Center of Snohomish Thegentlemen United States
NovoCure Limited Shinyhunters Israel
Integrated Health Systems Coinbasecartel United States
Fairview Dental Group Rhysida United States
Interim HealthCare [Head office] Anubis United States
BioPharma Thegentlemen United States
Medical Arts Chemists and Surgicals Pear United States
Austin Plastic Surgery Institute Pear United States
Aurora Health Management Insomnia United States
Medochemie Qilin Cyprus
Photon Health, Inc. Direwolf United States
Lifesum Direwolf Sweden
Foresee Pharmaceuticals Incransom Taiwan
WindRose Health Network Storm United States
Lansing Urgent Care Incransom United States
Colla Health Direwolf United States
PayrHealth Direwolf United States
Interim HealthCare Anubis United States
Columbia University Information (Dental) Global Secret Group United States
Rood & Riddle Equine Hospital Storm United States
Canadian Mental Health Association Storm Canada
Sharecare, Inc. Shinyhunters United States
Cook Medical LLC Shinyhunters United States
Baxter International, Inc. Shinyhunters United States
First Coast Heart Vascular Center Thegentlemen United States
SIA Medical Centre Rhysida Australia
Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co... Blacknevas United States
diabetesandmetabolism.com Incransom United States
STARKEY.COM Clop United States
PHILIPS.COM Clop Netherlands
UAB Biotecha Majinahanashi Lithuania