![Leak-site post naming Interim HealthCare [Head office], captured by ThreatCluster](https://threatcluster.lon1.digitaloceanspaces.com/darkweb-ransomware/anubis/interim_healthcare__head_office_/20261007T204429Z.png)
Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotAnubis claims Interim HealthCare [Head office] suffered a data leak of 530 GB, including financial information about franchisees, HR records and identity documents. The leak page identifies the victim as Interim HealthCare, a hospice services provider with annual revenues in the billions. The leak page states the data did not originate from a single company location but directly from the headquarters, and the post is published.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- https://www.interimhealthcare.com/
What was taken
Data breach at a major healthcare franchise headquarters.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- note
- This leak did not come from one of the company's individual locations, but directly from its headquarters.
- label
- this leak did not come from one of the company's individual locations, but directly from its headquarters
- value
- true
- It is important to note that this leak did not come from one of the company's in
- It is important to note that this leak did not come from one of the company's individual locations, but directly from its headquarters.
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.