Amazon owned OneMedical.com listed by ShinyHunters

• Ransomware group: ShinyHunters
• Country: United States
• Sector: Healthcare
• Announcement date: June 18, 2026

ShinyHunters claims massive data breach at OneMedical.com

The threat actor known as ShinyHunters has listed OneMedical.com on its leak site, claiming to have obtained a significant amount of data belonging to the organization. According to the announcement made on June 18, 2026, the group asserts that they have successfully compromised over 8.8TB of data from the healthcare provider.

This type of activity is characteristic of modern ransomware operations, specifically those employing double extortion tactics. In these scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release stolen data on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential information, which can lead to severe reputational and legal consequences.

Details of the claimed attack

The claim made by ShinyHunters suggests a high-impact event involving a massive volume of information. The group has stated that if a ransom is not paid by June 22, 2026, the stolen data will be released publicly. While the threat actor has provided a deadline for the extortion attempt, public information regarding the specific methods or identity of the ShinyHunters group remains limited.

Regarding the specific content of the breach, the listing provides no detailed information regarding the nature of the leaked data. Furthermore, no screenshots have been provided by the group to substantiate their claims. The listing names no specific data types that have been compromised.

About OneMedical.com

One Medical is a subscription-based primary care provider owned by Amazon. The organization offers an integrated healthcare experience through both digital health tools and physical clinics.

Potential impact and industry implications

This claim may pose a potential risk to the security of the organization's digital assets. Given that the entity operates in the healthcare sector, the potential exposure of sensitive health information could trigger legal processes under regulations such as HIPAA. The significant volume of data claimed could impact the organization's operational continuity and reputation.

Furthermore, if the data is leaked, individuals may face an increased risk of identity theft and targeted phishing attacks. In the healthcare industry, the sensitivity of patient information makes organizations particularly vulnerable to these types of extortion attempts.

To defend against such threats, organizations typically implement various security measures. These include robust encryption for data at rest and in transit, multi-factor authentication to prevent unauthorized access, and continuous monitoring of network traffic to detect anomalous behavior. Additionally, maintaining comprehensive incident response plans and conducting regular security audits are essential steps for organizations seeking to mitigate the impact of potential data exfiltration and ensure operational resilience.