The Tengu threat actor has launched a ransomware attack targeting the official website of the Health Services Association in Saudi Arabia, specifically affecting its operations and data security. This incident underscores the vulnerability of healthcare organizations to cyber threats, with Saudi Arabia being the impacted country. #SaudiArabia
Incident Details
- Victim: https://seha.org.sa
- Sector: Healthcare
- Country: SA
- Actor: tengu
- Source: http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion/blog/9194b5bee0d8552e9421cd7003d82a7861469b78856b501259d0c881519df3cf/
- Discovered: 2026-01-14 15:27:16.739537
- Published: 2026-01-14 15:26:56.943280
Information
- Ransomware attack targeted the official website of the Health Services Association in the Qassim region of Saudi Arabia.
- The organization, which is a non-profit/charitable entity, offers health and social services to those in need.
- The actor behind the attack is identified as Tengu.

Disclaimer: This post is based on public claims made by the ransomware group "tengu". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.