Skip to content
Leak-site post naming Personify Health, captured by ThreatCluster

Personify Health

helix

Ransomware leak-site victim intelligence

Posted
Oct 17, 2026
Country
US
Industry
Healthcare

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post

Helix claims a broad set of data from Personify Health was taken, including contacts, leads, deals, pricing, contracts, roles, users, product data, personnel data, customers, accounts, addresses and cases. The leak post is published and states that the data is hosted on GoFile. Personify Health is named as the victim in the leak.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
GoFile

What was taken

Personify Health. Yearly revenue ~$500 million yearly. Downloads are live.

Data categories
ContactsLeadsDeal lineOne priceOne contractOne roleOne userProductPeopleCustomersaccountsemployeesextra addressescases

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture