Coosalud.com in Colombia, operated by Coosalud EPS (Coosalud Entidad Promotora de Salud S.A.), reported a ransomware incident attributed to the ThreeAM threat actor. The attack disrupted the organization’s healthcare operations across #Colombia
Incident Details
- Victim: coosalud.com
- Sector: Healthcare
- Country: CO
- Actor: threeam
- Source: http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion/detail/g1gj1po6yas5yjoct7hzsljghcw6ux
- Discovered: 2026-09-28T18:52:35.108785+00:00
- Published: 2026-09-28T18:52:20.855083+00:00
Information
- One of the major health promotion entities in Colombia, managing subsidized and contributory healthcare regimes with multi-million-peso operating volumes.
- Alongside its subsidiaries, it plays a significant role in the country’s healthcare ecosystem.
Disclaimer: This post is based on public claims made by the ransomware group "threeam". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.