Leak-site post naming Medlink Georgia, captured by ThreatCluster

Medlink Georgia

cmdorganization

Ransomware leak-site victim intelligence · EN

Data size
285 GB
Posted
Jun 30, 2026
Country
GE
Industry
Healthcare

Summary

Written by ThreatCluster from victim profile, leak post

Cmdorganization claims 285 GB of Medlink Georgia data were leaked. The victim is Medlink Georgia (domain www.medlinkga.org), and the leak page describes it as a federally qualified health center serving northeast Georgia. The leak post is published on the group's site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
www.medlinkga.org

What was taken

We have proudly been serving northeast Georgia since 1976. As a federally qualified health center, we are able to offer uninsured and underinsured patients a sliding fee scale. No one is denied services due to lack of income or insurance status. Many of our employees are bi-lingual, eliminating the language barrier and providing a more comfortable environment for all cultures.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring a medical cross symbol in green and blue, with the text "MedLink GEORGIA" in a modern font.
onion leak page 13 KB
Screenshot of a document outlining responsibilities for check-in/check-out employees regarding financial audits and money management.
onion leak page 586 KB
Screenshot of a clinical report detailing COVID-19 test results, including patient information, physician details, and test specifics.
onion leak page 611 KB
Form W-9 titled "Request for Taxpayer Identification Number and Certification," filled out with sections for name, address, and taxpayer identification number.
onion leak page 502 KB
Screenshot of a tax form with sections for federal and state tax information, including employee details and allocated amounts.
onion leak page 462 KB
Screenshot of a spreadsheet containing a list of names, dates, and various health-related metrics.
onion leak page 1.8 MB
Document titled "Additional Audit Documentation Request" with a request date, planner information, and sections for loans and incoming rollovers, including contact details.
onion leak page 478 KB
Document containing a table with columns for names, transaction dates, Social Security numbers, and amounts for loans, distributions, and incoming rollovers.
onion leak page 335 KB
Form 5500 for the Annual Return/Report of Employee Benefit Plan, including sections for plan identification and basic plan information.
onion leak page 348 KB
Text displaying "PAC" and "Port Angeles Composite" against a blue background.
onion leak page 9.3 KB