Ransomware victim disclosure
← All victimsCarePoint Health
Claimed by genesis · listed 12 days ago
Status timeline
- Listed
May 9, 2026
- Data leaked
At a glance
- Group
- genesis
- Status
- Data leaked
- Country
- CA
- Sector
- Healthcare
- Listed on leak site
- May 9, 2026
About the victim
AI dossier — public-source company profileCarePoint Health is a community health organization based in Mississauga, Ontario, Canada. It provides integrated, team-based primary and allied health care services to patients of affiliated physicians, including chronic disease management, mental health, physiotherapy, nutrition counselling, and cancer screening. The organization operates as a hub connecting patients with multidisciplinary care providers across Mississauga.
- Industry
- Community & Primary Healthcare Services
- Address
- Mississauga, ON, Canada
Attack summary
Severity: critical — The attack involves confirmed exfiltration and publication of 70 GB of data from a healthcare provider, including patient medical records and financial data — constituting regulated, sensitive personal health information (PHI) at scale in a Canadian healthcare context governed by PHIPA.The genesis ransomware group claims to have exfiltrated approximately 70 GB of data from CarePoint Health's file server, including medical, operational, and financial data. The group has published a file listing via a Tor-hosted download link, indicating the data has been disclosed.
Data the group says was taken
AI dossier — extracted from the leak post- Medical data
- Operational data
- Financial data
- Company fileserver data
The group's post references roughly 1 proof file.
What the group claims
CarePoint Health will provide all patients of the company's affiliated physicians who would benefit from team based care.
The leak post
captured from the group's siteCarePoint Health will provide all patients of the company's affiliated physicians who would benefit from team based care ``` - 70 Gb of accessible data. - Medical Data. - Operational Data. - Financial Data. - Data from company fileserver. ``` [Download The List of Company Files](http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/download/9a21fa8a5e90492f7d7f.txt)
Screenshot of the leak post

Sources
Source
Indexed 12 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
