Rhysida Claims Valley Health Team Data Was Encrypted and Exfiltrated
Summary
Rhysida claims it encrypted and exfiltrated 9,056,196 files from Valley Health Team, including patient and financial data. The claim is attributed to the group’s leak-site listing and is unconfirmed.
Key points
- Rhysida claims 9,056,196 files, totaling 3.28 TB, were encrypted and exfiltrated.
- The claim describes databases involving 160,870 patients and 4.18 million diagnoses.
- Rhysida claims the data included 7.6 million unencrypted EHR scans, SSNs, passports, and financial records.
- The claim is attributed to Rhysida’s leak-site listing and monitored by ransomware.live.
- The monitoring post says the claim’s accuracy could not be confirmed.
Article Details
- Victim
- Valley Health Team
- Claim Date
- 2026-08-28
- Encryption Status
- Rhysida claims files were encrypted; this is unverified and not confirmed by the victim.
- Exfiltration Status
- Rhysida claims data was exfiltrated; this is unverified and not confirmed by the victim.
- Exfiltrated Data
- The claim describes SQL databases, patient and diagnosis records, unencrypted EHR scans, SSNs, passports, financial records, salaries, and tax information. The data's authenticity is unverified.
- Exfiltrated Size
- 3.28 TB claimed by Rhysida; unverified.
- Leak Status
- A Rhysida claim was listed on its leak site. Victim confirmation and the authenticity of any data are not established.