Ransomware victim disclosure
← All victimsOzarks Community Hospital
Claimed by Karakurt · listed 3 years ago
Status timeline
- Listed
Apr 18, 2023
- Data leaked
At a glance
- Group
- Karakurt
- Status
- Data leaked
- Country
- United States
- Sector
- Healthcare
- Listed on leak site
- Apr 18, 2023
- Data size
- 40 GB
About the victim
AI dossier — public-source company profileOzarks Community Hospital (OCH) is a community hospital located in Gravette, Arkansas, operating out of the former Gravette Medical Center Hospital Building. Founded in 1930, it provides healthcare services to the surrounding Ozarks region. The hospital operates under the domain ochsystem.com.
- Industry
- Community Hospital & Healthcare Services
- Address
- Gravette, AR, United States
- Founded
- 1930
Attack summary
Severity: critical — Confirmed exfiltration of regulated healthcare data (medical records, diagnoses) combined with PII at scale including Social Security numbers of employees and third-party partners, constituting likely HIPAA-covered PHI and sensitive financial records from a hospital.Karakurt claims to have exfiltrated approximately 40 GB of internal data from Ozarks Community Hospital, including detailed medical records, employee personal information, accounting and finance documents, and partner employee data such as Social Security numbers and addresses; no encryption is mentioned.
Data the group says was taken
AI dossier — extracted from the leak post- Medical records
- Test results and diagnoses
- Employee personal information
- Accounting and finance documents
- Partner/third-party employee SSNs
- Partner/third-party employee addresses
What the group claims
Founded in 1930 the Ozarks Community Hospital (OCH) of Gravette, AR is located in what was previously known as the Gravette Medical Center Hospital Building. They do not care much about their personnel and patients personal information. We have about 40GB of their internal information including detailed medical data (medical records, tests, diagnosis), employees personal information and accounting/finance documents that are very interesting to explore. They even lost their partners' employee information (ssns, addresses and so on).Coming soon!
Sources
Source
Indexed 3 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
