Ransomware victim disclosure
← All victimsSun City Pediatrics PA
Claimed by Spacebears · listed 13 days ago
Status timeline
- Listed
May 7, 2026
Current state: Listed for ransom
At a glance
- Group
- Spacebears
- Status
- Listed for ransom
- Country
- USA
- Sector
- Healthcare
- Listed on leak site
- May 7, 2026
About the victim
AI dossier — public-source company profileSun City Pediatrics PA, operating as Sun City Children's Clinic, is a pediatric medical practice located in Texas, USA. The clinic provides comprehensive healthcare services for children and aims to educate parents alongside treating patients. The practice reports annual revenue of under $5 million, indicating a small-scale operation.
- Industry
- Pediatric Healthcare
- Address
- Texas, USA
Attack summary
Severity: critical — The claimed exfiltration includes protected health information (PHI) of minors — medical histories, photos, and contact details — which constitutes regulated sensitive data under HIPAA. The pediatric nature of the victims (children's PII and medical records) elevates severity to critical.The Spacebears ransomware group claims to have exfiltrated a range of sensitive data from Sun City Pediatrics PA, including patient personal information, medical histories, patient photographs, staff personal and salary data, financial reports, and databases. No encryption claim or ransom amount is explicitly stated in the post.
Data the group says was taken
AI dossier — extracted from the leak post- Patient email addresses
- Patient residential addresses
- Patient telephone numbers
- Patient photographs
- Patient medical histories
- Staff personal data
- Staff salary and position data
- Financial reports
- Databases
- Other confidential documentation
What the group claims
Sun City Children's Clinic provides a high quality comprehensive approach in treating its patients and educating their parents. Revenue: <5M
The leak post
captured from the group's site## Sun City Pediatrics PA (USA, TX) **Sun City Children's Clinic provides a high quality comprehensive approach in treating its patients and educating their parents. Revenue: <5MContents:**_- Patient Data (e-mail addresses, residential addresses, telephone numbers)- Patient Photo - Patient Medical Histories- Stuff Personal Data (including salary and position data)- Financial Reports- Databases- Other Valuable and Confidential Documentation_
Data the group says was taken
- Patient Data (e-mail addresses, residential addresses, telephone numbers)
- Patient Photo
- Patient Medical Histories
- Staff Personal Data (including salary and position data)
- Financial Reports
- Databases
- Other Valuable and Confidential Documentation
Screenshot of the leak post

Sources
Source
Indexed 13 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
