Advanced Medical Consultants (US) reports that dragonforce claims the leak contains 2,300,000 lines of full patient data, plus partner agreements, management, payroll, and HR files. The threat actor’s note states they will leak 1,000 lines of patient data per day until the ransom is paid or the timer reaches 0, with fresh leak updates each day. #UnitedStates
Incident Details
- Victim: Advanced Medical Consultants
- Sector: Healthcare
- Country: US
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=ebf90db7-5028-44c5-92f3-d093a01b6226
- Discovered: 2026-05-15T16:51:45.194815+00:00
- Published: 2026-05-14T16:32:33.240497+00:00
Information
- 2,300,000 lines of full patient data
- Partner agreements
- Management files
- Payroll files
- HR files
- Fresh leaks will be posted daily until payment is made or the timer expires
- Day 1 leak: https://temp.sh/aLnBB/ADI-Day1.zip
Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.