Skip to content
Leak-site post naming Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates, captured by ThreatCluster
Back to victims

Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates

netrunner

Ransomware leak-site victim intelligence

Posted
Oct 8, 2026
Country
USA
Industry
Healthcare

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

Threat actors associated with the netrunner group claim to have exfiltrated data from Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates (MAGOPSA); no data quantity is disclosed. The leak post provides links to a "Full File List" and a "Full File Release" on an onion site, indicating MAGOPSA data is available but without specifying data types or volume. The leak is currently published/listed, and MAGOPSA is named as the victim in the leak.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
www.magopsa.com

What was taken

Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates (MAGOPSA) is one of the largest single groups of gynecologic oncologists in the mid-Atlantic region, delivering a wide variety of clinical services and procedures to meet the needs of patients with health and medical concerns related to the female reproductive tract.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Sample Files List
Coming Soon
Show Sample Files List
Sample Files List Coming Soon
Download Full File List
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/MAGOPSA.filelist.tar.gz
Download Full File Release
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/
Download Full File List URL
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/MAGOPSA.filelist.tar.gz
Sample Files List Coming Soon
Sample Coming Soon
Download Full File Release URL
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/
Download Full File List (onion)
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/MAGOPSA.filelist.tar.gz
Download Full File Release (onion)
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/

Leak-site images (6)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Invoice for medical records from Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates, dated June 5, 2024, addressed to a patient named Melinda.
onion leak page101 KB
Screenshot of a patient demographics form containing personal information such as name, date of birth, address, and emergency contact details.
onion leak page122 KB
Scan of a U.S. passport featuring a photo, personal details, and an eagle illustration.
onion leak page163 KB
Letter on official letterhead confirming the completion of an internship by a medical resident, including details about the residency program and contact information for inquiries.
onion leak page94 KB
Logo featuring a silhouette of a woman's profile alongside a purple ribbon, with the text "Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates."
onion leak page443 KB

Negotiation
Onion http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/MAGOPSA.filelist.tar.gz
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MAGOPSA/