A ransomware claim alleges Royal Bahrain Hospital (RBH) in Bahrain was targeted by a payload threat actor and hospital systems were encrypted. RBH, established in 2011, is a 70-bed facility offering inpatient and outpatient care and serves Bahrain and neighboring countries such as Oman, Qatar, Saudi Arabia, and the UAE. #Bahrain

Genesis has claimed a ransomware operation targeting a healthcare organization, encrypting systems and potentially exposing patient data. Details on the geographic impact and full extent of the breach are not publicly disclosed. #unknown

The American Board of Preventive Medicine, a healthcare certification organization in the US, reported a ransomware incident attributed to the Genesis threat actor. The attack disrupted access to systems and services, impacting operations in #UnitedStates

Insomnia claims to have compromised Nephrology Associates, PA, a leading central Arkansas nephrology practice, encrypting patient records across seven locations. The threat actor warns that if the ransom isn't paid, sensitive information will be leaked or sold. #UnitedStates

Meena Health reports a ransomware incident attributed to Killsec, with the ransom price marked as ??? and disclosures 0/1. The extortion note threatens data release or encryption of files but provides no disclosed payment amount or method. #Unknown

Neurotrials Research Inc, an Atlanta-based outpatient and inpatient clinical research facility, reported a ransomware incident attributed to the sinobi threat actor. Founded in 1997 and supporting 175+ clinical trials with 2,500+ volunteers, the organization stated that the attack impacted its operations, with the impacted country(s) listed as: # (unknown)

Cherry Health, a healthcare provider in Grand Rapids, Michigan, is experiencing a widespread technology outage that has disrupted its phone system and prompted an investigation as a possible cyberattack. Clinics remain open for scheduled appointments, and Cherry Health has not confirmed whether patient data were compromised; the outage follows a ransomware incident reported in late 2023. #CherryHealth #GrandRapids

DLL with a valid signed executable read more about China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

The ransomware claim from worldleaks alleges that Virginia Health Services, a Virginia-based healthcare provider in the United States, was breached, potentially exposing patient data and disrupting operations. Virginia Health Services delivers senior care, rehabilitation, memory care, and outpatient therapy across multiple facilities in the Hampton Roads region, and the claim suggests significant disruptions to care and data security. #UnitedStates

A ransomware claim targets Nordenta, a Danish subsidiary of LIFCO, and is attributed to the threat actor Kairos. The claim references Nordenta and Al Dente newsletters, includes consent language for receiving offers and information by email, and states that the beneficial owner of Nordenta is Carl Bennet. #Denmark

ViaQuest, a US-based care provider for seriously ill patients, reports a large-scale data breach attributed to the Anubis threat actor. The claim describes ransomware-style access leading to exfiltration of patient data across ViaQuest's systems #UnitedStates

The claim states that the threat actor Kairos compromised FriendlyCare Pharmacy in Australia, encrypting systems and potentially exfiltrating customer data. A ransom demand was reportedly issued, with threats of public disclosure if payment is not received. #australia

Insomnia, a ransomware threat actor, claims to have compromised United Medical Doctors (UMD), a multi-specialty medical-surgical group with 70+ Southern California locations and 40+ specialties. The claim describes encrypted systems and potential exposure or release of patient data unless a ransom is paid. #UnitedStates

A cyberattack on Signature Healthcare, first detected April 6, 2026, disrupted critical systems at Signature Healthcare and Signature Healthcare Brockton Hospital, forcing downtime procedures, ambulance diversions, and outages that impacted laboratory testing, pharmacy services, and administrative operations. Chemotherapy infusions were temporarily canceled and later phased back in while surgeries and urgent...

A cyberattack on Signature Healthcare and Signature Healthcare Brockton Hospital in Massachusetts forced ambulance diversions, activation of downtime procedures, and cancellations such as chemotherapy infusions while core emergency and inpatient services continue. Hospital officials are working with outside experts to investigate and restore systems, no group has claimed responsibility, and industry...

Signature Healthcare and Brockton Hospital confirmed a cybersecurity incident that disrupted certain IT systems, causing ambulance traffic to be diverted and infusion chemotherapy services to be cancelled on April 6, 2026. The hospital activated offline procedures, closed retail pharmacies, and is working with external partners to investigate and restore operations as quickly as possible. #SignatureHealthcare #BrocktonHospital

Ransomware incidents in 2025–2026 caused major operational disruptions across healthcare, finance, and manufacturing—most notably taking the University of Mississippi Medical Center's Epic EHR offline and crippling BridgePay's payment network. The shift to double- and multi-extortion tactics, the emergence of dozens of new ransomware groups, and AI-enabled tools have made data-neutralizing encryption and process-based access controls like D.AMO critical for blocking attacks and enabling rapid recovery. #UMMC #BridgePay

The insomnia ransomware group claims to have compromised *****d **d**** ****o**, a California-based healthcare organization that functions as a comprehensive ecosystem, combining clinical care, surgical services, research innovation, and workforce development. The claim frames the attack as targeting the United States #UnitedStates

A ransomware claim alleges that the threat actor qilin compromised Doctor.com in the United States. Details are sparse, with no confirmed ransom amount, encryption method, or data leakage claims. #UnitedStates

Insomnia claimed a ransomware incident against Valley Family Health Care, a US-based community health center offering medical, dental, behavioral health, and nutrition services. The organization operates 12 locations (including a mobile unit), accepts major insurances, and provides income-based sliding fees to ensure accessible care. #UnitedStates

Inc ransomware — one of the most popular among cybercriminals today — meets healthcare, the industry sector most targeted by RaaS.

Stay informed about the latest FBI warning regarding BlackCat ransomware healthcare attack. Protect your organization now.