Majinahanashi Claims Attack on CDA, Says It Stole 100,000 Medical Imaging Files

Summary
A ransomware group claims it encrypted CDA servers and stole more than 100,000 DICOM files containing patient and medical-study information. The claims have not been independently confirmed.
Key points
- Majinahanashi claims it targeted CDA and encrypted servers.
- The group claims to have extracted more than 100,000 DICOM files from a medical imaging archive.
- The reported data includes patient names, IDs, birth dates, study descriptions, and referring physicians.
- The source says the claims are unconfirmed and invites an official statement from CDA.
Article Details
- Victim
- CDA
- Victim Domain
- CDA.local
- Claim Date
- 2026-07-08
- Encryption Status
- Claimed by the ransomware group; the source says servers were encrypted but notes it cannot confirm the claim.
- Exfiltration Status
- Claimed by the ransomware group; the source says more than 100,000 DICOM files were extracted but notes it cannot confirm the claim.
- Exfiltrated Data
- The group allegedly extracted DICOM files containing patient names, IDs, birth dates, study descriptions, and referring physicians.
- Exfiltrated Size
- More than 100,000 DICOM files (group claim, unverified).
- Leak Status
- The group reportedly made public claims about the incident; the source does not establish that the data was published or verify its authenticity.