About Women Ob-Gyn data allegedly leaked by Anubis ransomware group

• Ransomware group: Anubis
• Country: United States
• Sector: Healthcare
• Announcement date: January 8, 2026

The Anubis ransomware group has published a leak announcement on its platform, claiming to have targeted the medical practice About Women Ob-Gyn. According to the post made on January 8, 2026, the threat actor group has allegedly obtained sensitive information belonging to the organization and has made it publicly available on their leak site.

The claimed attack and data leak

The Anubis group has created a formal leak announcement claiming to have successfully targeted About Women Ob-Gyn. Through this post, the group asserts that they have accessed and stolen a variety of sensitive documents. The group claims to have obtained these files and has subsequently released them to the public as part of their extortion activities.

The information disclosed in the leak includes highly sensitive materials. Based on screenshots provided by the group, the data allegedly contains a wide range of private information. The specific types of data claimed to be involved in this breach include:

• Patient medical records
• Patient personal data
• Employee contact information
• Financial documents

The screenshots associated with the announcement reportedly display patient medical histories, laboratory results, and prescription information. Furthermore, the leaked content is said to include insurance details, employee email lists, and the organization's financial analysis reports.

About Women Ob-Gyn

About Women Ob-Gyn is a medical practice based in Rochester, New York. The organization specializes in women's health, obstetrics, and gynecology. They provide comprehensive obstetric and gynecological care services to their patients within the healthcare sector.

Analysis and implications of the breach

This alleged breach poses significant risks to patient privacy and could potentially lead to identity theft for the individuals involved. The exposure of sensitive health data may result in legal and administrative sanctions for the organization under HIPAA regulations in the United States. Additionally, the disclosure of financial documents could increase the risk of secondary attacks targeting the organization's operational processes.

Information regarding the Anubis group remains limited; however, actions such as these are often considered part of a double-extortion strategy. In a double-extortion scenario, attackers do not only encrypt an organization's systems but also steal sensitive data to threaten the victim with public disclosure unless a ransom is paid.

When organizations face such threats, they may need to notify all affected individuals and conduct a thorough review of their data security measures. In the healthcare sector, protecting sensitive information is critical to maintaining patient trust and complying with stringent regulatory frameworks. Organizations in this sector often focus on strengthening access controls, implementing robust encryption for data at rest and in transit, and maintaining comprehensive monitoring to detect unauthorized access to medical and financial records.

Summary of the incident

The incident involves the following key elements:

• Organization: About Women Ob-Gyn
• Threat Actor: Anubis
• Claimed Date: January 8, 2026
• Announcement Type: Data leak

While the group has made these claims, the full extent of the impact remains to be determined as the investigation continues. The presence of medical, personal, and financial data in the leak highlights the high-value nature of healthcare targets for ransomware groups.