Whitearmor ransomware group claims Clínica La Sagrada Familia in Colombia

What happened

The whitearmor ransomware group has listed Clínica La Sagrada Familia (Colombia) on its leak site, according to RansomLook. RansomLook tracks these listings. Its entry is dated 2026-11-08.

A leak-site listing is a claim made by the group. It is not proof of an attack. The source does not say the clinic has confirmed an incident, and no independent outlet has verified it.

The full article could not be reviewed. Only its headline was available. These details are not confirmed:

• the entry point
• whether data was taken or encrypted
• the type or volume of any data
• any ransom demand
• any timeline beyond the listing date

Am I affected?

Not confirmed. The available source does not say which systems, people or data, if any, are involved. Patients, staff and partners of Clínica La Sagrada Familia cannot tell from this listing alone whether their information is affected.

What to do now

1. Treat the whitearmor listing as an unverified claim until the clinic or another official source comments.
2. Watch for a statement from Clínica La Sagrada Familia or Colombian authorities. That statement should be the basis for any action.
3. If you are a partner or supplier with direct connections to the clinic, check through your normal contacts with it whether it has confirmed anything.

Sources

• RansomLook: Clínica La Sagrada Familia (Colombia): claimed by the whitearmor ransomware group on its leak site