Cybercrime

Ransomware Gang Leaks Data Allegedly Stolen from Florida Department of Health

The Ransomhub ransomware gang has claimed the theft of 100GB of data from the Florida Department of Health.

Malware

The ransomware group known as RansomHub is leaking data allegedly stolen from the Florida Department of Health.

The cybercriminal group added the agency to its Tor-based leak site on July 2, claiming to have stolen over 100 gigabytes of data from its network, including personally identifiable information (PII) and protected health information (PHI).

RansomHub began publishing the allegedly stolen information over the weekend, after the Florida DOH missed a Friday deadline the gang set for receiving a ransomware payment in exchange for not releasing the data.

Under Florida law, government entities are prohibited from making ransom payments, so the missed deadline should not come as a surprise.

The leaked data reportedly includes service-related files, employee records, passport scans, prescriptions, health programs applications, screening results, family planning forms, dental services data, various correspondence, and more.

Potentially compromised PII and PHI includes names, addresses, phone numbers, dates of birth, Social Security numbers, appointment details, health insurance information, medical record numbers, screening results, health policy numbers, and more.

Advertisement. Scroll to continue reading.

The Florida Department of Health last week confirmed it was dealing with a cybersecurity incident, without providing further information on the attack.

The incident disrupted multiple services within the department, including the online system used for birth and death certificates issuance.

SecurityWeek has contacted the Florida DOH for additional information on the incident and will update this article if additional information is received.

Responsible for the recent attacks on Frontier Communications and Christie’s, RansomHub was the third most active ransomware group in May, accounting for 22 incidents.

Related: 300k Affected by Year-Old Data Breach at Florida Community Health Centers

Related: Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

Related:Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

Related Content

Malware & Threats

The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control.

Ransomware

Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen.

Cybercrime

Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang.

Ransomware

The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password.

Ransomware

Focusing on hacking law firms in the US, the ransomware group relies on fast flux to hide its C&C infrastructure.

Data Breaches

The non-bank lender discovered a ransomware attack nearly one year ago, but only recently completed its investigation.

Data Breaches

The Nitrogen ransomware group claims to have hacked the company’s systems, stealing 8TB of data, including confidential documents.

Data Breaches

The company took systems offline globally after hackers exfiltrated data and deployed file-encrypting ransomware.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version