Courageous Home Care listed on Hunters International leak site

• Ransomware group: Hunters
• Country: United States
• Sector: Healthcare
• Announcement date: March 16, 2025

Hunters International claims data exfiltration against Courageous Home Care

The threat actor group known as Hunters International has listed the United States-based organization Courageous Home Care on its official leak site. According to the announcement made on March 16, 2025, the group claims to have successfully exfiltrated a significant volume of data belonging to the healthcare provider.

This incident follows a growing trend in the cybercrime landscape where ransomware groups shift their operational focus. It has been reported that the Hunters International group ceased its encryption activities in 2025, opting instead to focus solely on data exfiltration. This shift in tactics highlights a move toward pure data theft, a method often used to increase leverage during extortion attempts.

Details of the alleged breach

The announcement made by the threat actors provides specific metrics regarding the scale of the claimed theft. The group alleges that the breach involves a substantial amount of information, which they claim to have stolen from the organization's systems. The specific details provided by the group include the following:

• Total claimed data size: 262.8 GB
• Total claimed file count: 205,760 files

While the group has provided the volume and quantity of the files, they have not provided specific details regarding the exact nature or the specific categories of the exfiltrated data. The listing does not specify what types of files were taken, leaving the exact contents of the 205,760 files unconfirmed.

About Courageous Home Care

Courageous Home Care is a home care service provider operating within the United States. The organization specializes in providing essential personal care and support services. Their primary mission involves assisting the elderly and supporting individuals who require specialized assistance to maintain their quality of life and daily functioning.

Potential risks and industry implications

The claim against Courageous Home Care poses significant risks to patient privacy and data security, particularly given the organization's role in the healthcare sector. Because the organization operates in the United States, a confirmed data breach of this nature could lead to substantial legal repercussions and administrative fines under HIPAA regulations. The sensitive nature of healthcare services means that exfiltrated data could potentially be utilized for identity theft or targeted phishing campaigns against patients or employees.

From a technical perspective, it is assessed that Hunters International may be using the Hive codebase. This is a critical consideration for organizations, as the group's historical operational patterns suggest they may engage in secondary extortion attempts. Organizations in the healthcare sector should remain highly vigilant against such follow-up attacks.

To defend against these types of threats, organizations typically implement multi-layered security strategies. This includes robust data encryption for both data at rest and data in transit, strict access controls to limit data exposure, and comprehensive monitoring to detect unauthorized exfiltration attempts. Furthermore, maintaining rigorous compliance with industry-specific regulations is a fundamental step in mitigating the legal and operational impact of potential breaches.