Ransomware Activity
Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.
Asisken Asistencia Médica S.A.
2d agohealth insurance administration · Guayaquil, Ecuador | Identity and contact records of 139,006 named insurance clients, including identity document numbers and dates of birth; 383,159 policy beneficiary records with insured amounts; 402,988 medical and insurance claims with diagnosis codes and dollar amounts, current through 20 October 2026; Policy billing, home and work addresses and bank account details | [NOT PAID - EXPOSED]
Arthritis Center of Riverside
2d agorheumatology medical practice · Riverside, California, United States | Scanned laboratory requisitions of named patients with dates of birth, home addresses and Medicare subscriber details, April through October 2026; Accounts receivable aging with patient names, account numbers, insurers and balances; Patient billing files and records correspondence of the practice | [NOT PAID - EXPOSED]