Chaos Claims It Will Leak 290 GB of Data From Carolina Asthma

Summary
The ransomware group Chaos claims it will disclose 290 GB of data from Carolina Asthma unless management reaches an agreement within 24 hours. The report says the data may include sensitive patient and business records; the claim is unverified.
Key points
- The monitored claim names carolinaasthma[.]com, a US healthcare organization, as the victim.
- The report attributes the claim to ransomware group Chaos and says management has 24 hours to reach an agreement.
- The group claims it holds 290 GB of data, including patient forms with personal and sensitive identifiers, plus administrative, financial, procurement, and business-service records.
- The source says it cannot confirm the group's claims.
Article Details
- Victim
- carolinaasthma.com
- Victim Domain
- carolinaasthma.com
- Claim Date
- 2026-09-29
- Encryption Status
- Unknown; the source does not report whether the victim's systems were encrypted.
- Exfiltration Status
- Unverified; the ransomware group claims it has data for disclosure, but the source does not confirm exfiltration.
- Exfiltrated Data
- The group claims the data includes patient forms containing personal information, plus administrative, financial, procurement, and business-services records.
- Exfiltrated Size
- 290 GB claimed by the group; unverified.
- Ransom Demand
- The group reportedly gave company management 24 hours to reach an agreement to avoid disclosure; no ransom amount or payment is reported.
- Leak Status
- Disclosure threatened; the source does not report that the data was published.
