Cholakyan Chiropractic listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Healthcare
• Announcement date: October 1, 2025

The Inc Ransom ransomware group has officially listed Cholakyan Chiropractic on its dedicated leak site. According to the announcement made on October 1, 2025, the threat actor group claims to have successfully breached the systems of the healthcare provider and exfiltrated sensitive information from the organization.

The details of the claim

The announcement made by the Inc Ransom group suggests that they have gained unauthorized access to the internal systems of Cholakyan Chiropractic. By listing the organization on their leak site, the group is utilizing a common tactic used by modern ransomware operators to pressure victims. This specific incident is categorized as a data breach, where the primary threat is the exposure of stolen information rather than just the encryption of local files.

In their public post, the group has provided evidence to support their claims regarding the breach. This evidence includes information detailing the operations of the organization and various samples of the data they claim to have stolen. Such public disclosures are a hallmark of ransomware groups that employ extortion tactics to increase their leverage over a target.

Data involved in the breach

While the specific volume of data and the exact number of files stolen have not been disclosed by the group, the announcement includes visual evidence of the stolen information. The group has shared screenshots intended to prove the validity of their claims. These samples specifically feature various forms of personal identification documents.

The following types of data were identified in the leak announcement:

• Personal identification documents
• Driver's licenses

The presence of these documents, specifically California driver's licenses and identification cards, indicates that the breach involves highly sensitive personal information that can be used for malicious purposes.

About Cholakyan Chiropractic

Cholakyan Chiropractic is a healthcare provider based in the United States. The organization offers a range of chiropractic services within offices that are equipped with specialized medical tools. Their facilities include physiotherapy modalities, digital X-ray machines, and various types of rehabilitation equipment.

The provider utilizes a team of trained chiropractors and assistants to deliver personalized treatment plans to their patients. This level of service involves the handling of significant amounts of sensitive patient information and medical records, making such organizations a frequent target for cybercriminals seeking high-value data.

Impact and industry implications

The incident involving Cholakyan Chiropractic highlights the risks associated with the double-extortion tactics frequently employed by the Inc Ransom group. In a double-extortion scenario, attackers not only encrypt an organization's data but also steal it, threatening to publish it online if a ransom is not paid. The publication of such data poses a severe risk of identity theft for both the patients and the employees of the organization.

For healthcare providers operating in the United States, such breaches carry significant regulatory weight. The exposure of sensitive personal information may trigger data breach notification obligations under the Health Insurance Portability and Accountability Act (HIPAA) regulations. Beyond the legal and regulatory hurdles, the disclosure of personal identification documents can facilitate highly targeted phishing attacks, as criminals can use the stolen details to craft convincing fraudulent communications.

The Inc Ransom group has been active since mid-2023, and the long-term impacts of their leaks can include lasting damage to an organization's reputation and significant disruptions to operational processes. To mitigate these risks, organizations in the healthcare sector often need to conduct thorough reviews of their data security protocols. Furthermore, when a breach occurs, it is critical for organizations to initiate formal notification procedures to inform all affected individuals, allowing them to take steps to protect themselves from potential identity theft or fraud.