Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Healthcare Retroactive Audits

healthcareaudits.net

Healthcare Retroactive Audits was listed on the DragonForce leak site on Nov 26, 2025. Information as of Oct 19, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
DragonForce
First listed
Nov 26, 2025
Claims recorded
1

Leak-Site Claim.

DragonForceConfirmed claim
Posted on the leak site
Nov 26, 2025
Collected by Brandefense
Nov 26, 2025
Data claimed
Not stated
Leak-site post text, written by the group
22 171 128 medical record files, neatly packaged into 11 archives by hospital. The firm Healthcare Retroactive Audits, which was auditing the data for insurers, not only let the leak happen but also took no steps to stop the files from being published. When we approached NIH Information Security Program to discuss the issue, they said they weren’t interested in resolving it. We’re now open to talks with the affected organizations, insurers and the hospitals whose data were lost. These files are only a portion of the total breach, and we’re deciding whether to keep the release at this size or…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Lane Equipment
laneequipment.com
DragonForceUSUnited StatesFood and BeverageNot stated
Canadian Mennonite University (CMU)
cmu.ca
DragonForceCACanadaEducation and ResearchNot stated
TQC S.A.
tqc.com.pe
DragonForcePEPeruAgriculture750 GB
TEXMA International Co., Ltd
texma.com.tw
DragonForceTWTaiwanManufacturingNot stated
Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda.
petrosul.com.br
DragonForceBRBrazilEnergy and UtilitiesNot stated
RÉSO
reso.fr
DragonForceFRFranceTechnologyNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.