Exitium Claims Gastroenterology & Hepatology of CNY Database in Extortion Threat

Summary
Ransomware.live records Exitium’s unverified claim targeting Gastroenterology & Hepatology of CNY, alleging a posted data sample and threatening sale of its database if ransom is not paid.
Key points
- The monitoring record attributes the claim to the ransomware group Exitium and identifies Gastroenterology & Hepatology of CNY as the victim.
- The claim says a data sample was posted and the full internal database would be sold if ransom were not paid.
- The group claims the database contains records for 167,303 patients, including 124,761 with Social Security numbers.
- The post lists clinical records and sensitive diagnoses among the allegedly exposed information.
- The publisher says it cannot confirm the claim’s accuracy; the record does not independently establish compromise or data theft.
Article Details
- Victim
- Gastroenterology & Hepatology of CNY; Digestive Disease Center of CNY, LLC (also reported affected)
- Victim Domain
- gandhofcny.com
- Claim Date
- 2026-04-14
- Encryption Status
- Unknown; no encryption is reported.
- Exfiltration Status
- Claimed but unverified; the post says a data sample was posted and the full database is for sale.
- Exfiltrated Data
- The claimed database includes patient information, SSNs, contact details, diagnoses, medications, and pathology reports. The source says 49,798 patients had sensitive diagnoses or medications.
- Exfiltrated Size
- The claimed database covers 167,303 patients; this figure is unverified.
- Ransom Demand
- Not disclosed; the post says the database will be sold if ransom is not paid.
- Leak Status
- A data sample is reportedly posted; the full database is claimed to be for sale if ransom is not paid. The claims are unverified.
