The ransomware claim targets carolinaasthma.com in the US, allegedly carried out by the threat actor “chaos.” Company management has 24 hours to reach an agreement to avoid the disclosure of 290 GB of data, including “Other Patient Forms” with sensitive personal information such as names, dates of birth, MRN, Social Security numbers, phone numbers, and addresses, as well as documents related to administrative and financial matters, procurement, and business services. #UnitedStates
Incident Details
- Victim: carolinaasthma.com
- Sector: Healthcare
- Country: US
- Actor: chaos
- Source: http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/post/EBMAw6xdj4wpIEZoORa8EhwkJcBfURKu
- Discovered: 2026-09-29T10:55:04.392923+00:00
- Published: 2026-09-29T10:54:49.373353+00:00
Information
- Company management has 24 hours to reach an agreement, otherwise 290 GB of data will be disclosed.
- The exposed data includes other patient forms with personal details such as name, date of birth, MRN, Social Security number, phone number, and address.
- Additional records involve administrative and financial matters, procurement, and business services.
Disclaimer: This post is based on public claims made by the ransomware group "chaos". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.