insomnia

insomnia operates an extortion-based ransomware model that combines data exfiltration with threats to publish stolen information, with breaches often involving unauthorized access to networks. The group has claimed around 50 victims, with the sectors hit most often including Healthcare, Technology, Manufacturing, Professional Services, and Business Services, and the countries most affected being US, BR, PA, and SG. A pattern across the reporting shows data theft with threats of public data release, illustrated by the Modoc Medical Center breach (unauthorized network access between January 19 and January 27, 2026), Atlas Ocean Voyages (37 GB of sensitive data stolen), and Cerámicas Kantu S.A.C. being threatened with data release unless negotiations occurred. These incidents indicate a consistent extortion approach targeting healthcare and corporate sectors across the US, BR, PA, and SG.

Sectors: Business Services, Hospitals & Physicians Clinics, Hospitals - Physicians Clinics · Countries: US, BR, PA