Boston Orthotics, Inc. data allegedly leaked by Anubis ransomware group

• Ransomware group: Anubis
• Country: United States
• Sector: Healthcare
• Announcement date: June 29, 2026

The Anubis ransomware group has published data they claim belongs to Boston Orthotics, Inc. on their leak site. This announcement, made on June 29, 2026, marks a significant potential breach involving sensitive information from a United States-based healthcare provider.

The claims made by the Anubis group

According to the listing on the group's platform, the Anubis group has identified data allegedly belonging to Boston Orthotics, Inc. The threat actors have used this platform to claim that the organization has been negligent in its efforts to protect patient data. This type of public shaming is a common tactic used by ransomware groups to pressure victims into meeting ransom demands.

The group's claims suggest that the breach is not limited to a single category of information. It is suggested that with the publication of this data, the organization's operational and financial records may also be at risk. While the specific details regarding the attack date were listed as June 29, 2026, the group has not provided information regarding the total size of the data stolen or the specific ransom demand being sought.

Data allegedly involved in the leak

The information released by the group includes various screenshots that purportedly show a wide array of sensitive documentation. The contents of these screenshots suggest that the breach encompasses both personal medical information and highly sensitive administrative records. The types of data identified in the leak include:

• Patient medical records
• Personal identification information
• Insurance information
• Financial records
• Payroll records
• Tax documents

The exposure of such a diverse set of documents—ranging from individual medical histories to corporate tax forms—indicates a deep level of access into the organization's internal systems and databases.

About Boston Orthotics, Inc.

Boston Orthotics, Inc. is a healthcare organization that provides orthopedic devices and support products. The company offers personalized orthotic and prosthetic solutions to patients, serving a specialized niche within the medical sector by focusing on customized physical support and mobility solutions.

Implications and risk assessment

This breach may increase the risk of identity theft and fraud for the affected patients, as their personal identification and medical records are now potentially in the hands of malicious actors. Furthermore, the exposure of health data could lead to legal and administrative sanctions for the organization under HIPAA regulations in the US, which govern the privacy and security of protected health information.

Beyond the immediate impact on patients, the leakage of financial data may trigger secondary risks such as corporate fraud attempts. The targeting of such sensitive data by the Anubis group may indicate the adoption of double-extortion tactics. In a double-extortion scenario, attackers do not just encrypt an organization's data to disrupt operations; they also steal the data to threaten its public release, thereby increasing their leverage during negotiations.

Information about the Anubis group remains limited, making it difficult to determine their full scope or long-term objectives. However, the nature of this attack highlights the ongoing vulnerability of healthcare providers. It may be advisable for the organization and the affected individuals to remain vigilant against potential phishing attacks, as stolen information is often used to craft highly convincing social engineering campaigns. Organizations in this sector typically focus on strengthening access controls, implementing robust encryption for data at rest and in transit, and conducting regular security audits to mitigate these types of high-impact risks.