Centro Médico Especializado OSI listed on kazu ransomware leak site

• Ransomware group: kazu
• Country: Mexico
• Sector: Healthcare
• Announcement date: August 23, 2026

Healthcare provider Centro Médico Especializado OSI targeted by kazu ransomware group

The healthcare provider Centro Médico Especializado OSI has been listed on a leak site belonging to the threat actor known as kazu. The announcement, which appeared on August 23, 2026, claims that the organization has been the victim of a cyberattack resulting in a data breach.

Details of the alleged attack

According to the announcement published by the kazu group, the threat actor claims to have gained unauthorized access to the network of Centro Médico Especializado OSI. The group alleges that this intrusion allowed them to obtain sensitive information belonging to the organization. The threat actor further claims to be conducting a ransomware campaign specifically targeting the operations or the data of the healthcare provider.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data. The attackers then threaten to leak this stolen information on public leak sites if a ransom is not paid. This method increases the pressure on the victim, as the threat of exposing private information can be as damaging as the operational downtime caused by encryption.

Data involvement and content

Regarding the specific content of the alleged breach, the listing provides no details or sample files regarding the content of the allegedly leaked data. Furthermore, no screenshots have been provided to substantiate the claims made by the group. The listing names no specific data types that have been compromised.

About Centro Médico Especializado OSI

Centro Médico Especializado OSI is a physical medicine and rehabilitation center located in Lima, Peru. Founded in 1999, the organization specializes in various medical fields, including physical medicine, physiotherapy, chiropractic care, and alternative medicine. The provider operates an extensive network of clinics throughout the Lima metropolitan area.

Risk assessment and industry implications

This incident may pose a significant risk due to the potential exposure of patient records and operational data. Because the organization operates within the healthcare sector, a data breach of this nature could lead to violations of patient privacy and create secondary risks, such as identity theft. For organizations operating in Peru, such incidents may also raise concerns regarding compliance with local data protection regulations.

In the healthcare sector, protecting sensitive information is a critical component of operational security. When a breach occurs, organizations typically face the challenge of managing both the technical recovery of systems and the legal and ethical obligations regarding patient confidentiality. General defensive steps for organizations facing such threats include conducting thorough reviews of network systems, implementing multi-factor authentication, and taking necessary precautions to prevent future data breaches.

Publicly available information regarding the kazu group remains limited. As with any reported incident, it is advisable for the affected organization to review its systems and implement necessary security measures to mitigate potential risks arising from the alleged breach.