Casper Orthopedics listed on Anubis ransomware leak site

• Ransomware group: Anubis
• Country: United States
• Sector: Healthcare
• Announcement date: July 12, 2026

Anubis claims data breach at Casper Orthopedics

The Anubis ransomware group has published an announcement on its dedicated leak site, claiming to possess data belonging to Casper Orthopedics. This development follows a pattern often seen in modern cyber extortion campaigns, where threat actors target sensitive information to exert pressure on an organization.

The threat actor known as Anubis has listed Casper Orthopedics on its leak site, alleging that the institution's data has been compromised. According to the post, the group claims that patient data and medical records have been exfiltrated from the organization's systems. While the group has made these claims, it is important to note that no screenshots were provided to verify the contents of the alleged breach, and information regarding the specific operations or identity of this group remains limited.

Details of the alleged exfiltration

The announcement made by the threat actor states that specific categories of sensitive information have been exposed. While the group has not provided a specific data size or a file count, they have explicitly identified the types of information they claim to have stolen. The listing identifies the following affected data types:

• Patient data
• Medical records

As is common in many ransomware incidents, the group has not provided visual evidence or screenshots to support their claims of having successfully exfiltrated these specific files. The lack of verifiable evidence is a common characteristic in many leak site announcements where the intent is to create maximum reputational pressure on the victim.

About Casper Orthopedics

Casper Orthopedics is a healthcare provider based in Wyoming, offering services in orthopedic surgery, sports medicine, and physical therapy. As a medical institution, the organization handles sensitive personal health information as part of its core service delivery to patients in the region.

Potential impact and industry implications

This alleged leak may pose significant risks of identity theft and fraud for individuals due to the exposure of personal health information. When sensitive medical data is compromised, the impact extends beyond the immediate digital infrastructure of the organization, potentially affecting the long-term security of the individuals involved.

As the institution is based in the United States, it may face data breach notification requirements and potential administrative penalties under HIPAA regulations. The publication of such data could lead to privacy violations and reputational damage for the organization. Furthermore, the leaked data might be utilized in secondary attacks or targeted phishing campaigns against the organization or its patients.

In the broader context of cybersecurity, ransomware groups often employ a strategy known as double extortion. In this model, attackers do not just encrypt an organization's files to disrupt operations; they also steal sensitive data to threaten the victim with public exposure. This increases the leverage the attackers hold during negotiations. For organizations in the healthcare sector, such attacks are particularly damaging because the sensitivity of medical records makes them highly valuable on illicit markets.

To defend against such threats, organizations in the healthcare sector typically focus on robust defensive measures. This includes implementing strict access controls to limit the movement of attackers within a network, maintaining comprehensive logging and monitoring to detect unauthorized data exfiltration, and ensuring that all systems are patched against known vulnerabilities. Additionally, regular security awareness training is a critical component in preventing the initial access that often leads to these large-scale data breaches.