Skip to content
Leak-site post naming MedHelp, captured by ThreatCluster

MedHelp

termite

Ransomware leak-site victim intelligence

Data size
~25gb of confidential data.
Views
10,588
Posted
Dec 17, 2025
Country
US
Industry
Healthcare

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Termite claims they published approximately 25 GB of confidential data from MedHelp Birmingham on their leak site. The victim is identified as MedHelp Birmingham (domain medhelpclinics.com) in the healthcare sector. The leak post includes a description of MedHelp Birmingham's services as described by the group.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

MedHelp Birmingham provides urgent and primary care services in the Birmingham area, welcoming walk-in patients. Their offerings include a Long COVID clinic, wellness therapies, and specialized services such as Lyme Disease treatment and gynecology care.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

Onion http://y4bdg56uaznmbptf7dgp5xn3sjyyh4qodqjrsbziqatnyapmiqqctgid.onion/medhelpclinics/