Gastroenterology & Hepatology of CNY targeted by Exitium ransomware group

• Ransomware group: Exitium
• Country: United States
• Sector: Healthcare
• Announcement date: April 14, 2026

Exitium claims a major data breach at Gastroenterology & Hepatology of CNY

The ransomware group known as Exitium has published a claim on its leak site regarding a data breach involving Gastroenterology & Hepatology of CNY. According to the announcement made on April 14, 2026, the threat actors allege they have successfully compromised the digital infrastructure of the medical practice.

The group claims to have exfiltrated data belonging to both Gastroenterology & Hepatology of CNY and its associated entity, the Digestive Disease Center of CNY. The threat actor has stated that they intend to sell the institution's entire internal database on the dark web if their ransom demands are not met. This follows a pattern often seen in modern cyberattacks where threat actors use the threat of public data exposure to pressure organizations into paying ransoms.

The scope of the alleged data theft

The claims made by Exitium suggest a massive exfiltration of sensitive information affecting a significant number of individuals. The group alleges that the stolen data includes personal information for 167,303 patients. This information reportedly includes names, addresses, phone numbers, and email addresses. Furthermore, the group claims to have obtained 124,761 Social Security Numbers (SSN).

Beyond basic identity information, the announcement alleges that highly sensitive medical documentation has been stolen. The specific types of data mentioned in the claim include:

• Patient personal information
• Social Security Numbers (SSN)
• Medical diagnosis and treatment records
• Pathology reports

The group further claims that the stolen records contain ICD-10 diagnosis codes, medication records, and highly sensitive health data. This sensitive information reportedly includes details regarding mental health, substance abuse, sexually transmitted infections (STIs), and cancer diagnoses.

About Gastroenterology & Hepatology of CNY

Gastroenterology & Hepatology of CNY is a medical practice that specializes in liver diseases and digestive system disorders. Based in Syracuse, New York, the institution provides various clinical services. It operates in conjunction with the Digestive Disease Center of CNY, which offers endoscopy services to its patients.

Analysis and implications of the incident

The nature of the data allegedly leaked by Exitium poses significant long-term security risks to the affected individuals. The combination of personal identifiers and Social Security Numbers significantly increases the risk of identity theft. Additionally, the exposure of sensitive medical details, such as mental health or cancer diagnoses, makes patients targets for highly personalized and sophisticated phishing attacks.

For the institution, this incident could lead to substantial legal and administrative sanctions under HIPAA regulations, given the sensitive nature of the healthcare sector. The exposure of such private medical records may violate patient privacy rights and could result in significant reputational damage to the organization. While information regarding the Exitium group remains limited, the tactics described align with double-extortion methods, where attackers not only encrypt systems but also steal data to leverage against the victim.

In such scenarios, organizations in the healthcare sector often face the challenge of managing both technical recovery and massive regulatory compliance requirements. Defensive strategies typically involve robust encryption of data at rest and in transit, strict access controls, and continuous monitoring of network traffic to detect unauthorized exfiltration. If the claims made by Exitium are verified, the affected individuals may face persistent risks to their personal and medical privacy.