Ransomware victim disclosure
← All victimsAirdrie Physiotherapy & Massage
listed as airdriephysio.com · Claimed by m3rx · listed 22 days ago
Status timeline
- Listed
Apr 29, 2026
- Data leaked
At a glance
- Group
- m3rx
- Status
- Data leaked
- Country
- GB
- Sector
- Healthcare
- Listed on leak site
- Apr 29, 2026
About the victim
AI dossier — public-source company profileAirdrie Physiotherapy & Massage is a multi-disciplinary outpatient clinic located in Towerlane Mall on Main Street in Airdrie, Alberta, Canada. The clinic offers physiotherapy, massage therapy, acupuncture, IMS, vestibular therapy, pelvic floor therapy, laser therapy, shockwave therapy, and orthotics. It serves patients with general injuries, workplace injuries (WCB), and motor vehicle accident (MVA) claims.
- Industry
- Physiotherapy & Rehabilitation Clinic
- Address
- Towerlane Mall, Main Street, Airdrie, Alberta, Canada
Attack summary
Severity: critical — 54 GB / 116,000 files exfiltrated from a healthcare clinic handling patient PII, medical/physiotherapy records, and insurance claim data (WCB and MVA) constitutes a large-scale breach of regulated sensitive health information, meeting the critical threshold.The m3rx ransomware group claims to have exfiltrated 54 GB of data comprising approximately 116,000 files from Airdrie Physiotherapy & Massage, with the data described as stolen and the disclosure status recorded as published.
Data the group says was taken
AI dossier — extracted from the leak post- Patient health records
- Physiotherapy treatment files
- Insurance claim documents (WCB/MVA)
- Personal identifying information
- Clinical assessment records
- Staff and administrative files
What the group claims
Airdrie Physiotherapy & Massage is a multi-disciplinary clinic located in Airdrie, Alberta, offering a range of services including physiotherapy, massage therapy, acupuncture, and laser therapy Stolen: 54gb 116k files
The leak post
captured from the group's siteIf you are interested in this data, please contact our support.Tox: 9A1217BEDA4AB77052A25D17CB6FFB34AFA2BE462E607F2FD8E1DF1DDD4CA16A64E18B1A0BF2
Sources
Source
Indexed 22 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
