Community Health Action of Staten Island listed on Genesis leak site

• Ransomware group: Genesis
• Country: United States
• Sector: Healthcare
• Announcement date: February 17, 2026

The threat actor group known as Genesis has listed data allegedly belonging to Community Health Action of Staten Island on its leak site. This announcement, which surfaced on February 17, 2026, follows an alleged cyberattack against the organization that reportedly occurred on February 13, 2026.

The claims made by Genesis

According to the announcement made by the Genesis group, the organization did not meet a ransom demand. As a direct consequence of this refusal, the threat actor stated that the stolen data would be published. This pattern is consistent with the double extortion tactics often employed by modern ransomware groups. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information to use as leverage during negotiations. If the victim refuses to pay the ransom, the attackers threaten to release the stolen data on public leak sites to cause reputational, legal, and operational damage.

The group's listing of the organization suggests a targeted approach, and the timing of the announcement follows the alleged intrusion by approximately four days. While the specific details regarding the group's identity and methods remain limited, the threat they pose to the targeted entity is significant due to the nature of the information involved.

Details of the alleged data breach

The claims made by the Genesis group regarding the content of the breach are extensive, involving a wide variety of sensitive information. The group asserts that the stolen data includes various types of highly confidential records. According to the announcement, the following data types are involved:

• Medical records
• HIV test results
• Personal data
• Financial data
• Tax records
• HR data
• Contracts

The claim specifically mentions that the breach includes medical databases and over 60,000 HIV test records. Furthermore, the information is said to include HIPAA-related information, as well as financial data, contracts, tax records, management data, and HR records belonging to Sun River Health. The inclusion of such a high volume of specific medical results, particularly regarding sensitive health statuses, increases the potential impact of the leak.

Organization profile

The organization identified in the leak is Community Health Action of Staten Island, which is a part of Sun River Health.

Impact and industry implications

The alleged leak may have negative impacts on individuals due to the exposure of sensitive health information. The exposure of such data, particularly medical and HIV test results, poses a significant risk to the privacy and dignity of the affected individuals. Furthermore, there is a possibility that the exposed data could be utilized by malicious actors for identity theft or targeted phishing attacks, where attackers use specific personal details to gain the trust of victims.

Given the organization's status, it may face legal and administrative consequences under HIPAA regulations, which govern the protection of sensitive patient health information. The organization's connection to Sun River Health suggests that the breach may affect a broader ecosystem, potentially extending the impact beyond a single entity. In the healthcare sector, such breaches often trigger rigorous regulatory investigations and significant compliance requirements.

To defend against such threats, organizations in the healthcare sector can implement various defensive measures. These include maintaining robust encryption for data at rest and in transit, implementing strict access controls to limit data exposure, and conducting regular security audits. Additionally, continuous monitoring of network traffic and employee training on phishing awareness are critical components of a comprehensive cybersecurity strategy designed to mitigate the risks posed by ransomware and data exfiltration.