Leaknet ransomware group claims leak of patient SSNs, per RansomLook
RansomLook lists a leaknet ransomware claim about leaked patient SSNs; the victim is not named or confirmed, so watch for an official notice.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, not confirmed: only a leak-site claim tracked by RansomLook, with no independent verification
What happened
According to the claim tracker RansomLook, the leaknet ransomware group claims on its leak site to have released patient SSNs. RansomLook listed the post under the title “PLAINTEXT PANIC: Patients SSNs Just Dropped in the Wild” on 2026-11-01.
This advisory is based only on that headline. The full listing could not be reviewed. A leak-site post is the group’s own claim, not proof that a breach occurred.
Not confirmed:
- The victim organization is not named in the headline. No victim has confirmed the claim.
- No independent outlet has verified the claim.
- How many records may be involved, what other data may be included, and how any access was gained are all not confirmed.
Am I affected?
Not confirmed. The headline does not identify the organization, the patients or the data volume. You can only know whether you are affected if the organization involved issues a notification.
What to do now
- Watch for a breach notification from any healthcare provider you use. Do not rely on leak-site posts.
- Do not visit, download or redistribute data from ransomware leak sites.
- If you receive an official notice, follow its instructions. This is a general precaution and is not drawn from the source.
- Check back for updates. This advisory will change if the victim or an independent outlet confirms details.