Data size
105 GB
Posted
Aug 28, 2026
Industry
Healthcare
Summary
Written by ThreatCluster from file listing, victim profile, leak post, screenshotAnubis claims to have exfiltrated 105 GB of data from Caduceus Medical Group, including patients' data (basic contact details and medical information), employee records (identity documents and payroll), and financial information. The group states that some credentials had been compromised and that negligence by the victim contributed to the breach. The leak page identifies the victim as Caduceus Medical Group, a healthcare provider.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- www.caduceusmedicalgroup.com
What was taken
Predictable but dangerous data exposed in a healthcare company breach.
Data categories
Patients' data including basic contact details and medical informationEmployee records (identity documents, payroll)Financial information
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.
ThreatCluster capture
Document detailing a security incident involving Greenway Health, including a timeline and mention of a penetration test related to their MyHealthRecord portal.
onion leak page
181 KB
Document titled "Caduceus Medical Group" containing a prostate ultrasound report with patient details, technique description, and impression of a normal-sized prostate.
onion leak page
174 KB
Document detailing an MRI report for the lumbar spine without contrast, including patient information, examination technique, and findings.
onion leak page
180 KB
Document detailing a thyroid ultrasound report, including patient information, technique used, findings, and measurements.
onion leak page
179 KB
Document containing a medical progress note with patient details, chief complaint, history of present illness, and past medical history sections.
onion leak page
265 KB
The image is a medical report featuring patient information, including a name, age, and scan details for the left hip and lumbar spine.
onion leak page
276 KB
Document labeled as a primary care physician progress note, containing patient information, medical history, and treatment details.
onion leak page
203 KB
Image of a U.S. military identification card featuring a photo, rank, expiration date, and various official seals.
onion leak page
98 KB
Image of a health insurance card featuring the BlueCross BlueShield logo, with sections for subscriber name, identification number, and group number.
onion leak page
208 KB
Scan of a California driver license featuring personal details such as name, date of birth, and physical characteristics.
onion leak page
96 KB