devman ransomware group lists newhorizonsmedical.org on its leak site
The healthcare organization newhorizonsmedical.org has been listed on the leak site of the ransomware group known as devman.
- Published
- 2 min read
- 2 min read
- Ransomware group: devman
- Country: United States
- Sector: Healthcare
- Announcement date: December 1, 2025
The healthcare organization New Horizons Medical has been listed on the leak site of the ransomware group known as devman. The group has published an announcement claiming to have obtained data belonging to the organization, marking a potential data breach incident.
The claims made by devman
According to the announcement posted by the devman group, the organization is currently facing a significant data exposure. The group claims to have successfully exfiltrated a substantial amount of information. Specifically, the post indicates that 236 GB of data is currently at risk of being published. This type of threat is characteristic of modern ransomware operations, often referred to as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to demand a ransom for decryption; they also steal sensitive information to threaten its public release if the ransom is not met.
The group has issued a specific ransom demand in exchange for not publishing the alleged data. The group is demanding a payment of 90,000 USD to prevent the release of the information they claim to have stolen. While the group has made these claims, the incident remains an allegation until verified through independent forensic investigation.
Data involved in the alleged breach
The listing does not specify the exact nature of the compromised data. However, given the organization's operation in the healthcare sector, it may contain sensitive patient records or employee information. The specific file types and the exact contents of the 236 GB of data remain unknown at this time.
- No specific data types were named in the listing.
About New Horizons Medical
New Horizons Medical is a healthcare organization based in Massachusetts. The organization provides a variety of specialized medical services, including psychiatry, addiction treatment, and mental health services.
Implications and industry considerations
This incident may indicate potential vulnerabilities in the organization's data security posture. If the breach is confirmed, the sensitivity of healthcare data could lead to regulatory scrutiny and potential fines under frameworks such as HIPAA. The compromise of patient privacy could result in secondary risks such as identity theft and reputational damage.
In the healthcare sector, the protection of sensitive information is paramount due to the high value of medical records on the dark web. When organizations face such threats, common defensive steps include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular vulnerability assessments. Furthermore, if a breach is confirmed, organizations may need to initiate forensic investigations to verify the claims and notify affected parties. Information regarding the devman group is limited, which is a common challenge for security teams responding to emerging threat actors.