The Thegentlemen ransomware group added three US healthcare organisations to its data-leak site on 9 October: DW McMillan Memorial Hospital, MercyMed of Columbus and North Philadelphia Health System. Leak-watch trackers surfaced all three listings within hours of publication; none carries technical detail, claimed data volumes or ransom demands, and none of the organisations had publicly confirmed an incident at the time of writing. Tracker databases credit Thegentlemen with more than 1,000 listed victims, among the largest counts of any active extortion brand, and US healthcare providers are a recurring target class for the group. As with every leak-site listing, these are adversary claims rather than confirmed breaches: whether data was stolen, from whom, and what it contains remains unverified pending victim or regulator disclosure. The listings sit alongside Thegentlemen's broader early-October run of US victims across other sectors.

• Source article