Skip to content
Leak-site post naming Aurora Health Management, captured by ThreatCluster

Aurora Health Management

insomnia

Ransomware leak-site victim intelligence · EN

Posted
Jul 27, 2026
Country
USA
Industry
Hospital & Health Care

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

The group insomnia claims data exfiltration from Aurora Health Management, LLC, but the leak provides no disclosed data volumes or file types. They state the compromised data include HR and recruitment records, internal documentation and source code. The leak post is published (posted 2026-07-27) and identifies Aurora Health Management, LLC as the victim; the organization is described as a US hospital and health-care provider headquartered in Millersville, Maryland.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Domains
www.aurorahealthmgt.com

What was taken

Aurora Health Management, LLC operates a skilled nursing and rehab center in Frederick, MD. With nearly 25 years in long-term care, it improves troubled facilities through comprehensive management, programs, and Medicare/Medicaid standards.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Download Data
http://r3keoxye5mki4fqcvlk4hpfqqzxmakchjpmem7oppynobcieamdbmcyd.onion/73f5d7be0c0947d9/

Leak-site images (7)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page1.9 KB
Document titled "Reconsideration Request Form" with sections for beneficiary information, Medicare number, claim number, provider name, and contact details.
onion leak page261 KB
Document detailing a patient's discharge plan, including medical history, treatment adjustments, and rehabilitation notes related to knee pain.
onion leak page340 KB
Screenshot of a table listing residents of a rehabilitation center, including columns for names, addresses, admission dates, and departments.
onion leak page486 KB
Letter addressed to a healthcare facility regarding a records request, dated July 13, 2026, with contact information and a signature at the bottom.
onion leak page206 KB
Document dated October 23, 2024, regarding medical records and billing for an individual named Dennis Reasler, including contact information and a request for electronic records.
onion leak page315 KB