Ransomware victim disclosure
← All victimsPavillon
Claimed by GLOBAL SECRET · listed 3 hours ago
Status timeline
- ListedAug 10, 2026
Current state: Listed for ransom
At a glance
- Group
- GLOBAL SECRET
- Status
- Listed for ransom
- Country
- United States
- Sector
- Healthcare
- Listed on leak site
- Aug 10, 2026
- Data size
- 646 GB (47,950 Files, 7,750 Folders)
- Records
- 47950 files
- Ransom demanded
- $8.5
About the victim
AI dossier — public-source company profilePavillon is a nonprofit addiction treatment center located in the Blue Ridge Mountains of Western North Carolina, offering residential, outpatient, and extended care services for substance use disorders and co-occurring mental health conditions. Operating for over 30 years with 9,000+ alumni, the organization serves on a 160-acre campus and is accredited by CARF.
- Industry
- Substance Use & Addiction Treatment, Healthcare
- Address
- Mill Spring, North Carolina, United States
- Employees
- 100-200
- Founded
- 1994
Attack summary
Severity: critical — Confirmed exfiltration of 646 GB containing patient medical records and PHI from a healthcare provider. HIPAA-regulated data affecting vulnerable population (addiction treatment patients) with significant scale and sensitivity.GLOBAL SECRET claims to have exfiltrated 646 GB of data (47,950 files, 7,750 folders) from Pavillon. The group has published the breach and is demanding an $8.5 million ransom, indicating both encryption and data theft.
Data the group says was taken
AI dossier — extracted from the leak post- Patient medical records
- Personal health information (PHI)
- Treatment histories
- Financial records
- Insurance information
- Staff records
- Administrative documents
What the group claims
Pavillon offers innovative treatment for alcoholism, substance use and related disorders such as trauma, depression and anxiety with a continuum of care including residential, outpatient and extended care services on a beautiful 160-acre residential setting in the mountains of Western North Carolina. Pavillon's 6-week non-profit programs focus on the needs of the mind, body and spirit for successful life-long recovery. After 12 months, 91% of residential patients report remaining in recovery.
The leak post
captured from the group's siteCountry: Mill Spring, North Carolina, United States | Website: pavillon.org | Revenue: $8.5 Million | Industry: Alcoholism Treatment, Hospitals & Clinics, Healthcare | Employees: 100-200 | Properties: 646 GB (47,950 Files, 7,750 Folders) Pavillon offers innovative treatment for alcoholism, substance use and related disorders such as trauma, depression and anxiety with a continuum of care including residential, outpatient and extended care services on a beautiful 160-acre residential setting in the mountains of Western North Carolina. Pavillon’s 6-week non-profit programs focus on the needs of the mind, body and spirit for successful life-long recovery. After 12 months, 91% of residential patients report remaining in recovery. Pavillon’s licensed, caring staff support you to live free of addiction. Chef-Prepared meals promote optimal health and successful recovery. Staff satisfaction is 93% and 97% recommend Pavillon employment to others.
Screenshot of the leak post
Sources
Source
Indexed 3 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.