Fullerton Surgical Center listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United States
• Sector: Healthcare
• Announcement date: August 20, 2025

Fullerton Surgical Center listed on Qilin leak site

The Fullerton Surgical Center (FSC) has been listed on the leak site of the Qilin ransomware group. According to an announcement made by the threat actors, the organization has been targeted in a cyberattack that involves the potential exposure of sensitive information.

Details of the claimed attack

The Qilin group announced on August 20, 2025, that data belonging to Fullerton Surgical Center has been published on their platform. The threat actor claims to have successfully gained access to the organization's systems and obtained sensitive medical documents. Following this access, the group appears to have initiated a process regarding the publication of this data on their dedicated leak site.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These sites often host stolen data to increase the pressure on the targeted organization. In many modern ransomware campaigns, threat actors employ a method known as double extortion. This technique involves not only encrypting an organization's files to disrupt operations but also stealing sensitive data to threaten its public release. This dual approach increases the leverage held by the attackers, as the victim faces both operational downtime and the risk of significant reputational and legal consequences.

Information involved in the breach

The group's claims suggest that the breach involves sensitive information. Based on the available information, the following types of data are claimed to have been leaked:

• Medical documents
• Patient information

While the group's claims indicate that specific categories of information have been compromised, no detailed list of specific data types or individual records has been provided by the attackers. Furthermore, there is no information available regarding the total size of the data stolen or the specific number of files involved in the incident. Additionally, the group has not disclosed a ransom demand or a specific amount required to prevent the further publication of the data.

About Fullerton Surgical Center

Fullerton Surgical Center is a surgical clinic based in the United States. The organization provides a wide range of medical services, including general surgery, orthopedics, otolaryngology, plastic surgery, pain management, urology, and gastroenterology.

Impact and industry implications

This incident may pose a risk to the organization's patient privacy and data security processes. As a healthcare provider operating in the US, a potential data breach could lead to legal sanctions under HIPAA regulations. The exposure of medical records and patient information is a significant concern for healthcare entities due to the sensitive nature of the data involved.

Given the Qilin group's double extortion method, there is a possibility that the leaked data could be used for identity theft or targeted phishing attacks. Such attacks often follow a breach, where criminals use stolen personal details to impersonate legitimate entities or to gain further access to other systems. It is likely that the organization may face operational disruptions and reputational damage as a result of this event.

The Qilin group, which has been active since 2022, is known as a structure that targets the healthcare sector. Healthcare organizations are frequently targeted by such groups because the sensitive nature of medical data makes it highly valuable on the dark web. To defend against such threats, organizations in this sector often focus on implementing robust security frameworks, such as multi-factor authentication, regular system patching, and comprehensive employee training to recognize phishing attempts. Maintaining strict access controls and ensuring data encryption can also serve as critical defensive layers against unauthorized access and data exfiltration.