Ransom! AiHealth

Thegentlemen threat actors have targeted AiHealth, a US-based online medical services provider, with a ransomware claim, potentially disrupting their platform that facilitates healthcare consultations, appointment bookings, and home medication delivery. The attack could impair the company’s ability to deliver critical medical services to its users. #UnitedStates

Incident Details

  • Victim: AiHealth
  • Country: US
  • Actor: thegentlemen
  • Source: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
  • Discovered: 2025-11-24 00:24:07.233907
  • Published: 2025-11-24 00:03:16.000000

Information

  • Provider of online medical services aimed at facilitating healthcare access and management.
  • Allows users to find specialists for medical advice and book appointments conveniently online.
  • Offers health check-up programs tailored to individual needs.
  • Provides the ability to purchase medicines online and receive them at home through an integrated pharmacy network.
  • Features tools for scheduling home healthcare nursing appointments.
  • Enables users to access a variety of medical services remotely, enhancing convenience and accessibility.

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live