Skip to content
Leak-site post naming Nippon Medical School Musashi Kosugi Hospital, captured by ThreatCluster
Back to victims

Nippon Medical School Musashi Kosugi Hospital

netrunner

Ransomware leak-site victim intelligence · EN

Files
1
Views
902
Posted
Apr 3, 2026
Country
Kosugimachi, Kawasaki, Japan
Industry
Healthcare

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

netrunner claims Nippon Medical School Musashi Kosugi Hospital was the victim, publishing two sample data files: PATIENTS.first.10k.csv and PATIENTS.first.10k.csv.tar.gz. They describe the files as CSV and tar.gz formats, and ThreatCluster captured a screenshot of the post on the group’s leak site. The leak page describes the hospital as a 372-bed regional teaching hospital in Nakahara-ku, Kawasaki, Japan, affiliated with Nippon Medical School. The leak post is published; these are the group’s claims and not independently verified here.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
1937
Domains
https://www.nms.ac.jp/kosugi-h/

What was taken

Nippon Medical School Musashi Kosugi Hospital is a 372-bed regional teaching hospital in Nakahara-ku, Kawasaki (Musashi-Kosugi area), affiliated with Nippon Medical School. Established in 1937, it offers comprehensive services across 36 clinical departments, including emergency and critical care, ICU, NICU, perinatal and pediatric care, cancer treatment, and minimally invasive endovascular procedures. The hospital serves as a regional hub with disaster-resistant facilities and an on-site heliport, and emphasizes advanced, patient-centered care and medical education.

Data categories
patient records
File types seen
csv × 1
Sample files (1)
PATIENTS.first.10k.csv

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Download Sample
/sample/PATIENTS.first.10k.csv.tar.gz
full_file_list_url
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MusashiKosugi/checksums.sha256
full_file_release_url
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MusashiKosugi/
Show Sample Files List
PATIENTS.first.10k.csv
Download Full File List
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MusashiKosugi/
Download Full File Release
http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MusashiKosugi/

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "NYSH" with a stylized design, predominantly in green and gray colors.
onion leak page15 KB
Screenshot of a digital layout map showing various rooms and stations, labeled with codes and designations, likely for a facility or event.
onion leak page204 KB

Negotiation
Onion http://netrunrs65cn2yidokrmxn5rrur2gjpuyuwrt6mkfy6lek4jnqojn4qd.onion/MusashiKosugi/