Benzona ransomware group claims data breach against casamedica.com.gt

• Ransomware group: Benzona
• Country: Guatemala
• Sector: Healthcare
• Announcement date: January 30, 2026

Benzona group claims data leak involving casamedica.com.gt

The ransomware group known as Benzona has officially announced a data leak on its dedicated leak site. The group claims to have successfully targeted casamedica.com.gt, a healthcare services and medical equipment supplier, asserting that they have obtained a significant volume of information from the organization's systems.

The announcement, which was posted on January 30, 2026, marks a new development in the group's activities. As of the time of the announcement, the threat actor has not provided detailed information or screenshots regarding the specific content of the allegedly leaked data, leaving the exact nature of the stolen files unconfirmed.

Details of the claimed attack and ransom demand

According to the claim made by Benzona, the attack occurred on January 30, 2026. The group is reportedly using a double extortion tactic, a common method in modern ransomware attacks where threat actors not only encrypt an organization's data but also steal sensitive information to leverage against the victim. In such scenarios, the attackers threaten to publish the stolen data on public leak sites if the ransom is not met.

The group has issued a specific ransom demand of $60,000 in exchange for not releasing the data. While the group has identified the target and the amount required, information regarding the Benzona group itself remains limited in the public domain, making it difficult to ascertain their full operational profile or historical patterns.

Data involved in the alleged breach

The threat actor claims to be in possession of a substantial amount of data belonging to the organization. The specific details provided are as follows:

• Claimed data size: 300 GB

The listing does not specify the exact number of files involved in the alleged theft.

About casamedica.com.gt

Casa Médica is a healthcare services and medical equipment supplier based in Guatemala. The organization provides a wide range of medical devices, consumables, and healthcare solutions for hospitals, clinics, and individual users. Given its role in the healthcare sector, the organization handles various medical-related solutions and supplies for a diverse client base.

Potential risks and industry implications

This claim poses significant risks to the organization's operational continuity and the privacy of patient records. In the healthcare sector, the sensitivity of data is exceptionally high. If the leak is verified, it could lead to secondary risks, including the misuse of personal information and identity theft, which can have long-lasting consequences for the individuals involved.

Furthermore, the organization may face legal obligations under relevant data protection regulations following such an incident. The potential public release of data, should the ransom remain unpaid, could result in significant reputational damage and a profound loss of trust among patients, clinics, and hospitals that rely on their services.

For organizations operating within the healthcare sector, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized access. Because healthcare data is a high-value target for ransomware groups, proactive security measures and incident response planning are essential to mitigate the impact of potential breaches and ensure the privacy of sensitive medical information.