American Association on Health and Disability targeted by Sinobi ransomware group

• Ransomware group: Sinobi
• Country: United States
• Sector: Healthcare
• Announcement date: October 2, 2025

The Sinobi ransomware group has listed the American Association on Health and Disability on its leak site, claiming to have obtained the organization's data. This announcement, made on October 2, 2025, follows a purported attack that occurred on September 13, 2025.

Details of the claimed attack

The threat actor known as Sinobi has claimed responsibility for the incident involving the American Association on Health and Disability. According to the group's announcement, the organization's data has been encrypted. The group claims to have obtained a total of 80 GB of information during the attack.

In line with common double extortion tactics used by ransomware groups, the attackers are not only encrypting systems to disrupt operations but are also threatening to publish the stolen data to pressure the victim. To prevent the publication of these files, the Sinobi group is demanding a ransom payment of $5,500,000.

Data involved in the breach

According to the information provided in the leak, the compromised data is said to include several sensitive categories of information. The specific types of data mentioned by the threat actor include:

• Customer data
• Incident reports
• HR records

The exposure of such diverse datasets, ranging from client-related information to internal human resources documentation, highlights the potential breadth of the breach.

About the American Association on Health and Disability

The American Association on Health and Disability (AAHD) is an organization focused on improving the overall health of individuals with disabilities through health promotion and advocacy. It aims to ensure health equity for people with disabilities through research, policy development, and public health programs.

Impact and potential risks

This incident may pose a risk of exposing the organization's sensitive health policy and research data. As a US-based entity, a potential data breach could lead to legal processes and regulatory scrutiny under HIPAA regulations. The exposure of HR records may create secondary risks for employees, such as identity theft and targeted phishing attacks.

Information regarding the Sinobi group is limited. Data security concerns may arise for the organization's stakeholders and researchers, which could potentially impact the institution's operational continuity. When organizations face such threats, common defensive steps often include implementing robust backup strategies, enforcing multi-factor authentication, and maintaining strict network segmentation to prevent lateral movement by attackers.

In the healthcare sector, the sensitivity of the data involved—including research and policy information—means that breaches can have long-lasting implications for both the institution and the individuals it serves. The potential for regulatory investigation under frameworks like HIPAA underscores the importance of maintaining high standards of data protection and incident response readiness.