Leak-site post naming Interim HealthCare [Head office], captured by ThreatCluster
Back to victims

Interim HealthCare [Head office]

anubis

Ransomware leak-site victim intelligence

Data size
530 GB
Posted
Aug 21, 2026
Country
US
Industry
Healthcare

Summary

Written by ThreatCluster from site fields, file listing, victim profile, leak post, screenshot

Anubis claims Interim HealthCare [Head office] suffered a data leak of 530 GB, including financial information about franchisees, HR records and identity documents. The leak page identifies the victim as Interim HealthCare, a hospice services provider with annual revenues in the billions. The leak page states the data did not originate from a single company location but directly from the headquarters, and the post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
https://www.interimhealthcare.com/

What was taken

Data breach at a major healthcare franchise headquarters.

Data categories
financial information about franchiseesHR recordsidentity documents

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
this leak did not come from one of the company's individual locations, but directly from its headquarters
value
true

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the word "interim" in bold white letters, enclosed within a circular outline, set against a black background.
onion leak page 1.1 MB
Screenshot of a document discussing potential legal, strategic, and financial implications for Interim HealthCare and related businesses.
onion leak page 238 KB
Screenshot of a financial budget spreadsheet detailing various expenses and income for different months, including amortization and interest expenses.
onion leak page 208 KB
Screenshot of a healthcare billing document with patient details, service codes, and associated costs.
onion leak page 239 KB
Screenshot of a financial report detailing transaction types, including revenue and adjustments, with monthly totals for 2025.
onion leak page 303 KB
Screenshot of a financial report with columns for names, amounts, and dates, featuring a watermark.
onion leak page 433 KB
Screenshot of a balance sheet detail showing assets and prepaid expenses with various journal entries and balances from P8 2022 to P6 2023.
onion leak page 207 KB
Document titled "MEMORANDUM" with a header indicating confidentiality, discussing a Houston support team meeting and related financial details.
onion leak page 221 KB
Scan of a confidential application form with personal information fields, including name, contact details, and marital status.
onion leak page 261 KB
Document titled "Employee Medical Self-Screening Form" with sections for personal information, medical history, and a list of conditions.
onion leak page 176 KB