Chaos ransomware group lists carolinaasthma.com on its leak site

• Ransomware group: Chaos
• Country: United States
• Sector: Healthcare
• Announcement date: September 29, 2026

Chaos ransomware group claims data breach at Carolina Asthma & Allergy Center

The threat actor known as Chaos has officially listed carolinaasthma.com on its dedicated leak site. According to the announcement made on September 29, 2026, the group claims to have successfully compromised 290 GB of data belonging to the healthcare provider. This development marks a significant escalation in the group's activities, targeting a specialized medical facility in the United States.

Details of the claimed extortion attempt

The Chaos group has announced the initiation of a ransom demand process against the organization. According to the threat actor, the company management has been provided with a specific 24-hour window to reach a settlement or agreement with the attackers. The group has stated that if no agreement is reached within this designated timeframe, the stolen data will be disclosed publicly on their leak site.

This tactic is a hallmark of double extortion ransomware attacks. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage. By threatening to release private data, the attackers aim to pressure the victim into paying a ransom to prevent the public exposure of confidential information, which can lead to severe reputational and legal damage.

Alleged compromised data types

While the screenshot content provided by the group could not be displayed due to a loading failure, registration information provides insight into the nature of the alleged breach. The data claimed to be compromised includes a wide variety of sensitive information, ranging from medical identifiers to administrative records. The following data types are reportedly included in the leak:

• Patient records
• Names
• Dates of birth
• MRNs
• Social Security numbers
• Phone numbers
• Addresses
• Administrative records
• Financial records

Organization profile

The target of this alleged attack is the Carolina Asthma & Allergy Center. This healthcare provider is based in North Carolina, United States. The facility specializes in providing medical services that are specifically focused on the treatment of allergies and asthma.

Potential impact and industry implications

This incident suggests that sensitive data belonging to a healthcare entity may be at risk. The inclusion of Social Security numbers and medical records in the alleged leak could significantly increase the risk of identity theft for the affected individuals. Because the entity is based in the United States, the incident may lead to legal consequences under HIPAA regulations, which govern the protection and privacy of patient health information.

Beyond the immediate threat of data exposure, organizations in this sector may face secondary risks such as operational disruptions and targeted phishing attacks. When sensitive personal information is leaked, attackers often use it to craft highly convincing social engineering campaigns against both the organization and its clients. Public information regarding the specific methodologies or capabilities of the Chaos group remains limited.

To mitigate such risks, healthcare organizations typically focus on robust defensive measures. These include implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized data exfiltration, and ensuring that all sensitive data is encrypted both at rest and in transit. Regular security awareness training is also a critical component in defending against the phishing attacks that often follow a data breach. As the threat landscape evolves, the ability of healthcare providers to protect highly regulated data remains a primary concern for both administrators and regulatory bodies.