Threat Intelligence Brief
Curated summary with source attribution
Source: emeryreddy.com
Threat Risk: High
Victim: Healthcare providers
Incident: Data breach involving the exfiltration of patient medical records and PII.
Impact: Potential exposure of sensitive diagnostic, billing, and Medicare/Medicaid data for numerous patients.
Attacker: Anubis (alleged)
Analysis: Caduceus Medical Group confirmed that unauthorized actors accessed and exfiltrated data from their network in August 2026. While the provider has not officially named the perpetrator, the Anubis ransomware group has claimed responsibility and asserted that 105 GB of data were stolen. The compromised information includes highly sensitive Protected Health Information (PHI) and PII, specifically targeting Medicare and Medicaid details.
Recommendations: Implement strict access controls and multi-factor authentication across all healthcare network entry points.; Regularly monitor dark web leak sites for mentions of organizational data to identify breaches early.; Ensure comprehensive encryption of patient health information both at rest and in transit.
Source: Emery Reddy
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-10-20 22:11 UTC
Unauthorized network intrusion resulting in a data breach. Exposure of PII and medical treatment information for 3,735 individuals. An unauthorized actor maintained network access for approximately one week, scraping sensitive health and personal data. This incident highlights the ongoing vulnerability of small healthcare providers to targeted network intrusions.
Corroborating source: claimdepot.com
Update — 2026-10-22 05:55 UTC
A vishing-based data breach affecting Central Ohio Primary Care Physicians Inc. Unauthorized exposure of PII and PHI for approximately 1.4 million individuals. Threat actors utilized vishing techniques to bypass security controls and gain unauthorized access to internal files. While the Epic-based MyChart portal remained secure, the breach exposed critical PII and PHI. This incident highlights the persistent risk of human-centric vulnerabilities within large healthcare organizations.
Corroborating source: claimdepot.com
Update — 2026-10-23 16:06 UTC
Data breach involving the unauthorized access of sensitive patient information. Exposure of personal and medical data for over 580,000 individuals. Washington Gastroenterology suffered a significant data breach in late 2024 that exposed the sensitive information of approximately 583,471 individuals. The notable delay between the breach occurrence and the eventual notification of victims highlights critical weaknesses in the organization’s incident detection and response timelines. This event underscores the severe legal and financial risks associated with inadequate PHI protection.
Corroborating source: al.com
Update — 2026-10-24 02:09 UTC
Unauthorized access and acquisition of patient personal information. Data exposure affecting approximately 41,000 individuals and subsequent legal settlement costs. The incident involved the unauthorized access of personal information belonging to approximately 41,000 patients. This case underscores the significant legal and financial liability healthcare organizations face when failing to secure sensitive patient records. The resulting settlement focuses on victim reimbursement and long-term credit monitoring.
Corroborating source: classaction.org