Ransomware victim disclosure
← All victimsOntellus
Claimed by Blackbyte · listed 3 years ago
Status timeline
- Listed
Aug 24, 2023
- Data leaked
At a glance
- Group
- Blackbyte
- Status
- Data leaked
- Country
- United States
- Sector
- Business Services
- Listed on leak site
- Aug 24, 2023
About the victim
AI dossier — public-source company profileOntellus, founded in 1975 and rebranded in 2017, is a Houston, Texas-based company providing internet-based medical and legal records retrieval, billing summaries, and related services. The company serves insurance carriers, law firms, and custodians across workers' compensation, medical malpractice, general liability, and mass tort sectors. It operates a HIPAA-compliant portal and offers tools such as record chronology, indexing, social media investigation, and DICOM viewing.
- Industry
- Legal & Insurance Records Retrieval Services
- Address
- Houston, Texas, United States
- Founded
- 1975
Attack summary
Severity: critical — Ontellus handles large volumes of medical records, legal records, and insurance claims data on behalf of insurers and law firms, constituting regulated sensitive data (HIPAA-covered medical records, PII at scale). The disclosed status is 'data_published', confirming actual exfiltration and release of this highly sensitive material.BlackByte claims to have attacked Ontellus and has published data as indicated by the 'data_published' disclosure status. The attack likely involved exfiltration of business and potentially regulated records given the nature of the company's operations in medical and legal records retrieval.
Data the group says was taken
AI dossier — extracted from the leak post- Medical records
- Legal case records
- Billing records and summaries
- Client insurance claims data
- Worker compensation records
- Personally identifiable information (PII)
- Business operations data
What the group claims
Established in 1975, and rebranded in 2017 Ontellus provides internet-based record retrieving and billing services. Their headquarters are located in Houston, Texas
Sources
- Victim siteontellus.com
Source
Indexed 3 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
