Cybercrime

Ransomware Gang Leaks Data Allegedly Stolen from Florida Department of Health

The Ransomhub ransomware gang has claimed the theft of 100GB of data from the Florida Department of Health.

Malware

The ransomware group known as RansomHub is leaking data allegedly stolen from the Florida Department of Health.

The cybercriminal group added the agency to its Tor-based leak site on July 2, claiming to have stolen over 100 gigabytes of data from its network, including personally identifiable information (PII) and protected health information (PHI).

RansomHub began publishing the allegedly stolen information over the weekend, after the Florida DOH missed a Friday deadline the gang set for receiving a ransomware payment in exchange for not releasing the data.

Under Florida law, government entities are prohibited from making ransom payments, so the missed deadline should not come as a surprise.

The leaked data reportedly includes service-related files, employee records, passport scans, prescriptions, health programs applications, screening results, family planning forms, dental services data, various correspondence, and more.

Potentially compromised PII and PHI includes names, addresses, phone numbers, dates of birth, Social Security numbers, appointment details, health insurance information, medical record numbers, screening results, health policy numbers, and more.

Advertisement. Scroll to continue reading.

The Florida Department of Health last week confirmed it was dealing with a cybersecurity incident, without providing further information on the attack.

The incident disrupted multiple services within the department, including the online system used for birth and death certificates issuance.

SecurityWeek has contacted the Florida DOH for additional information on the incident and will update this article if additional information is received.

Responsible for the recent attacks on Frontier Communications and Christie’s, RansomHub was the third most active ransomware group in May, accounting for 22 incidents.

Related: 300k Affected by Year-Old Data Breach at Florida Community Health Centers

Related: Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

Related:Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

Related Content

Cybercrime

Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution.

Data Breaches

An extortion group stole personal, financial, and medical information from the hospital’s network.

Data Breaches

The bank holding company was hacked in June, but the investigation into the incident continues.

Data Breaches

The physical security firm says its alarm monitoring and system functionality have not been affected.

Ransomware

The INC Ransomware gang has been targeting vulnerable SMA1000 appliances for root access and lateral movement.

Data Breaches

Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files.

Data Breaches

Ernst & Young previously confirmed that personal and financial information was stolen from a third-party management platform.

Ransomware

The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version