Skip to content
Leak-site post naming Valley Health Team, captured by ThreatCluster

Valley Health Team

rhysida

Ransomware leak-site victim intelligence

Posted
Aug 28, 2026
Industry
Healthcare

What was taken

Valley Health Team 9,056,196 files3.28 TBLarge SQL databases containing the clinic's entire lifetime of information.Major databases:160,870 patients4.18 million diagnoses7.6 million unencrypted EHR scansSSN, passports, and other personal data.Financial statements, salaries, taxes.Dear customers, please submit your requests�there are plenty of files here that can be monetized. More

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains a screenshot of a document displaying a list of usernames and passwords, along with various personal details and associated information.
onion leak page292 KB
The image contains multiple documents, including contracts and agreements related to healthcare services, with sections labeled "CONFIDENTIAL" and "Participating Provider Agreement."
onion leak page290 KB