Ransomware victim disclosure
← All victimsEl Centro del Barrio (CentroMed)
listed as CentroMed · Claimed by Karakurt · listed 3 years ago
Status timeline
- Listed
Jun 28, 2023
- Data leaked
At a glance
- Group
- Karakurt
- Status
- Data leaked
- Country
- United States
- Sector
- Healthcare
- Listed on leak site
- Jun 28, 2023
- Data size
- 25 GB
About the victim
AI dossier — public-source company profileEl Centro del Barrio, doing business as CentroMed since 2001, is a federally qualified community health center founded in 1971 and based in San Antonio, Texas. It provides a broad range of primary and preventive healthcare services including pediatrics, women's health, family medicine, dental care, optometry, podiatry, pharmacy, and behavioral health. The organization serves a predominantly Hispanic community and receives HHS/HRSA funding with Federal Public Health Service deemed status.
- Industry
- Federally Qualified Health Center (Community Health / Primary Care)
- Address
- San Antonio, Texas, United States
- Founded
- 1971
Attack summary
Severity: critical — Confirmed exfiltration of regulated sensitive data at scale: thousands of SSNs combined with protected health information (PHI) from a healthcare provider constitutes a critical HIPAA-regulated breach affecting a vulnerable patient population.Karakurt claims to have exfiltrated 25 GB of data from CentroMed, including several thousand Social Security Numbers, medical and health records, and accounting, financial, and human resources data; no encryption claim is made, consistent with Karakurt's exfiltration-only model.
Data the group says was taken
AI dossier — extracted from the leak post- Social Security Numbers (several thousand)
- Medical and health records
- Accounting and financial data
- Human resources data
What the group claims
El Centro del Barrio (CDB), which started doing business as CentroMed in 2001, was founded in 1971 and ran one counseling program for children and adolescents. They lost 25 GB of their data, which contains several thousand ssns and other medical and health information. Accounting, financial, human resources data is also represented.
Sources
Source
Indexed 3 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
