Greater Mental Health of New York listed on sinobi leak site

• Ransomware group: sinobi
• Country: United States
• Sector: Healthcare
• Announcement date: October 20, 2025

The ransomware group known as sinobi has listed Greater Mental Health of New York on its leak site. According to the announcement made on October 20, 2025, the threat actor claims to have targeted the organization and is demanding a ransom of 5,100,000 USD to resolve the situation.

The claims made by sinobi

The threat actor identified as sinobi has officially published a listing for Greater Mental Health of New York on its dedicated leak site. In the announcement, the group claims that the organization's data has been encrypted, a common tactic used in ransomware attacks to disrupt business operations and force a payment. The group has explicitly stated that they are demanding a ransom payment of 5,100,000 USD from the institution.

Ransomware attacks typically involve a process where malicious software is introduced into a network, allowing the attackers to gain access and eventually encrypt critical files. Once the encryption is complete, the attackers use a leak site to publicize the victim's name and the ransom amount, creating public pressure on the target to meet their financial demands. In this specific instance, the attack is claimed to have occurred on October 20, 2025, the same day the announcement was posted.

Data involved in the incident

While the announcement by sinobi mentions that the organization's data has been encrypted, there is no specific detail provided regarding the nature of the leaked or accessed data. The listing does not specify the types of files that were targeted or the volume of information involved.

• No specific data types were named in the listing.

In many modern ransomware scenarios, threat actors employ a method known as double extortion. This technique involves not only encrypting the victim's files to halt operations but also stealing sensitive data before the encryption occurs. The attackers then threaten to leak this stolen information on public forums if the ransom is not paid. This dual approach significantly increases the pressure on an organization, as they face the risk of both operational downtime and the public exposure of confidential information.

Organization profile

Greater Mental Health of New York is an entity formed by the merger of The Mental Health Association of Westchester and The Mental Health Association of Rockland. It is a healthcare organization dedicated to promoting mental health throughout the Hudson Valley region.

Implications and sector considerations

This situation may lead to disruptions in the organization's operational processes. As an entity operating in the healthcare sector, a potential data breach could bring about legal sanctions under HIPAA regulations. The sensitivity of the information handled by such organizations means that any breach carries significant weight regarding regulatory compliance and patient privacy.

Sensitive patient data held by the organization may pose a risk for identity theft or targeted phishing attacks. When personal health information is compromised, it can be used by malicious actors to conduct highly convincing social engineering campaigns against individuals. Furthermore, the use of double extortion by groups like sinobi increases the pressure on the organization to comply with demands to prevent the release of such sensitive information.

For organizations in the healthcare sector, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing strong access controls, maintaining regular, offline backups of critical data, and conducting regular security awareness training for staff to recognize phishing attempts. Because public information about the sinobi group is limited, organizations must remain vigilant against the evolving tactics used by such threat actors.