Anatomic Clinical Laboratory Associates listed on Insomnia ransomware leak site

• Ransomware group: insomnia
• Country: United States
• Sector: Healthcare
• Announcement date: February 7, 2026

Anatomic Clinical Laboratory Associates targeted by Insomnia ransomware group

The Nashville-based healthcare provider Anatomic Clinical Laboratory Associates has been listed on a leak site belonging to the ransomware group known as Insomnia. The announcement, posted on February 7, 2026, indicates a significant data breach involving sensitive information allegedly belonging to the organization's patients.

Details of the claimed attack

According to the claims made by the Insomnia group, the threat actors gained unauthorized access to the systems of Anatomic Clinical Laboratory Associates on November 25, 2025. The group alleges that the breach is extensive, claiming that sensitive information belonging to over 200,000 patients has been compromised during the intrusion.

Ransomware attacks often involve a process where attackers infiltrate a network, escalate privileges, and eventually exfiltrate data before deploying encryption. When a group uses a leak site, it is often part of a strategy to pressure the victim into paying a ransom by threatening to release the stolen information to the public. This specific incident involves a claim of unauthorized access that occurred several months prior to the public listing on the leak site.

Data types allegedly compromised

The announcement provided by the threat actor included screenshots intended to prove the theft of sensitive records. The information displayed in these images suggests a high level of exposure regarding personal and medical details. The data types identified in the announcement include:

• Patient names
• Social security numbers (SSN)
• Dates of birth
• Medical record numbers
• Health information
• Prescription and treatment details
• Clinical reports

The exposure of such a wide array of identifiers, particularly social security numbers and medical records, represents a severe compromise of privacy. When highly sensitive personal health information is leaked, it can lead to various secondary malicious activities. For example, such data is often used in identity theft or targeted phishing campaigns, where attackers use specific medical or personal details to gain the trust of the victim.

About Anatomic Clinical Laboratory Associates

Anatomic Clinical Laboratory Associates is a physician-owned pathology group that serves the Middle Tennessee region. The organization provides essential diagnostic services and clinical expertise to the community. Their role includes offering healthcare support to a diverse population, including patients who may be uninsured.

Risk assessment and organizational implications

This incident may pose a significant risk due to the exposure of a high volume of personal health information from a healthcare provider. Because the organization is based in the United States, the breach may trigger regulatory actions under the Health Insurance Portability and Accountability Act (HIPAA), which governs the privacy and security of protected health information.

The potential consequences for the affected individuals are substantial, as they could be exposed to identity theft and highly targeted phishing attacks. For organizations in the healthcare sector, such incidents highlight the critical importance of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining rigorous patch management, and conducting regular security awareness training for staff to prevent initial access by threat actors.

While information regarding the Insomnia group remains limited, it is important to note that ransomware groups frequently employ double extortion tactics. In these scenarios, the attackers not only encrypt the victim's data but also threaten to leak it to increase the likelihood of payment. This dual threat increases the complexity of the incident response and the potential impact on the victim organization and its clients.