interlock ransomware targeted Riviera Healthcare Center, a for-profit skilled nursing facility in the US that has provided 24-hour nursing and rehabilitation services for over 50 years. Due to negligence and poor security practices, confidential patient protected health information (PHI) and related records were exposed, violating HIPAA and applicable California laws (and potentially the CCPA/CPRA) and resulting in mandatory breach notification, fines, civil litigation, corrective action requirements, and reputational and financial harm. #UnitedStates
Incident Details
- Victim: Riviera Healthcare Center
- Sector: Healthcare
- Country: US
- Actor: interlock
- Source: http://puvoz5h52oepibye5hqzvfyhqhsfxzmzkr7v4tjtioxe3qaao2b6faqd.onion/index.php?p=
- Discovered: 2026-10-07T18:00:56.245957+00:00
- Published: 2026-10-07T18:00:29.373900+00:00
Information
- Riviera Healthcare Center is a for-profit skilled nursing facility with more than 50 years of operation, providing 24-hour nursing and rehabilitation services.
- Due to negligence and poor security practices, confidential data was exposed, including patient protected health information, medical histories, diagnoses, treatment details, payment records, and employee/HR data.
- The breach may trigger HIPAA and California CMIA violations, with potential CCPA/CPRA implications, along with mandatory breach notifications, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.
Disclaimer: This post is based on public claims made by the ransomware group "interlock". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.