Dark Project claims data breach at Ohio Living Home Health & Hospice

• Ransomware group: Dark Project
• Country: United States
• Sector: Healthcare
• Announcement date: August 5, 2026

Dark Project claims a massive data leak at Ohio Living Home Health & Hospice

The ransomware group known as Dark Project has announced a significant data breach targeting Ohio Living Home Health & Hospice. According to the group's announcement on their leak site, they claim to have exfiltrated at least 600GB of data from the organization. This alleged breach involves a massive collection of files, with the group asserting that over 5,000 stolen documents are part of the leak.

The announcement, made on August 5, 2026, suggests a prolonged period of unauthorized access. While the leak was announced in August, the group claims the underlying cyberattack occurred as early as June 8, 2026. This discrepancy in dates is common in ransomware operations, where attackers may spend weeks or months inside a network before making a public announcement to maximize pressure on the victim.

Details of the alleged cyberattack and stolen data

Dark Project asserts that the sensitive information was obtained following a cyberattack. The group claims that the stolen data covers a broad timeframe, spanning from 2022 to 2026. This multi-year scope suggests that the attackers may have had persistent access to the organization's internal systems for an extended period.

The group claims that the leaked information includes a wide variety of sensitive documents. Based on screenshots provided by the attackers, the data contains highly personal and confidential information. The categories of data allegedly stolen include:

• Employee records
• Driver licenses
• Patient personal documents
• Photos
• Medical records
• Social security numbers
• Insurance information
• Confidential company financial information
• Bank records

The presence of such diverse data types—ranging from medical history to financial banking records—highlights the high-value nature of the target. In modern ransomware scenarios, groups often employ a tactic known as double extortion. In this method, attackers do not just encrypt an organization's systems to disrupt operations; they also steal sensitive data and threaten to publish it on a public leak site if a ransom is not paid. This increases the leverage held by the threat actor, as the victim faces not only operational downtime but also severe regulatory and reputational consequences.

About Ohio Living Home Health & Hospice

Ohio Living is a non-profit organization that has been in operation since 1922. The organization provides a variety of essential services within the state of Ohio, focusing on life plan communities and home health services. Its operational scope includes senior care, nursing home services, and various forms of home health support, making it a critical provider of healthcare and community living services.

Potential implications and industry risks

The nature of the data claimed by Dark Project suggests significant risks for the organization. The combination of medical records, social security numbers, and financial information creates a high risk for identity theft and targeted phishing attacks against both employees and patients. Furthermore, the exposure of such sensitive information could lead to substantial legal risks under HIPAA and other healthcare-specific regulations designed to protect patient privacy.

For organizations operating in the healthcare sector, such breaches can impact operational stability and long-term reputation. When medical and financial data are compromised simultaneously, the complexity of the forensic investigation required to determine the full extent of the breach increases significantly. Organizations in this sector often face the necessity of extensive regulatory reporting and long-term monitoring for affected individuals.

To defend against such threats, healthcare organizations typically implement multi-layered security strategies. This includes robust access controls, continuous monitoring of network traffic to detect unauthorized exfiltration, and regular employee training to prevent initial access via phishing. Additionally, maintaining offline backups and ensuring strict compliance with data protection frameworks are essential steps in mitigating the impact of potential ransomware and data theft incidents.