Two separate ransomware groups have claimed attacks on Interim HealthCare, a home-healthcare provider operating in roughly 40 U.S. states, according to The HIPAA Journal. The Genesis ransomware group listed the company on its leak site on August 10, 2026, claiming 1TB of exfiltrated data including medical records. A second group, Anubis, separately listed the company on August 21, claiming 530GB of franchise and operational data.
An Oklahoma City franchise location filed a formal breach notification with the U.S. Department of Health and Human Services on July 31, 2026.
Why it matters: Two independent ransomware groups claiming the same healthcare organization within weeks of each other raises the possibility of either separate intrusions or data being resold and reused by multiple criminal groups — either scenario underscoring how difficult it has become for healthcare providers, including smaller franchise-model operators, to fully contain a breach once patient data has left their environment.
Source: The HIPAA Journal, September 9, 2026.
Leave a Reply