Healthcare & More listed on Dragonforce leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Healthcare
• Announcement date: November 22, 2025

Dragonforce claims to have compromised Healthcare & More

The threat actor known as Dragonforce has listed the organization Healthcare & More on its dedicated leak site. According to the announcement published on November 22, 2025, the group claims to have successfully compromised the company and obtained a significant amount of information. This type of activity is characteristic of modern ransomware operations, where threat actors often employ double extortion tactics. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data to use as leverage, threatening to publish it on a public leak site if a ransom demand is not met.

The announcement regarding this specific incident was made on November 22, 2025, the same day the group claims the attack took place. While the group has published the organization's name on its platform, the specific details regarding the method of entry or the exact nature of the breach remain undisclosed by the attackers. Ransomware leak sites serve as a public gallery for these groups, often used to pressure victims through reputational damage and the threat of exposing private information to the public or regulatory bodies.

Data involved in the alleged breach

The Dragonforce group alleges that it has successfully exfiltrated 17.19 GB of data belonging to Healthcare & More. The volume of data claimed suggests a substantial breach of the organization's digital environment. However, the specific content of the leaked data has not been disclosed by the attackers. Given the nature of the services provided by the victim organization, it is possible that sensitive customer personal information and insurance policy details may be included in the stolen dataset.

The listing does not provide a specific breakdown of the file types or the exact categories of information stolen. The following points summarize the current status of the data information:

• The total size of the claimed data is 17.19 GB.
• The specific content of the leaked data is not disclosed.
• The listing names no specific data types.

About Healthcare & More

Healthcare & More is an independent insurance agency based in the United States. The company offers a diverse range of insurance products designed to meet various client needs. Their portfolio includes Medicare plans, health insurance, life insurance, and dental coverage. The agency specializes in providing personalized consultation and guidance to its clients, with a particular focus on assisting seniors in navigating their various healthcare insurance options.

Potential impact and sector implications

This incident may pose significant secondary risks to the clients of Healthcare & More, such as identity theft and targeted phishing attacks. When sensitive personal information is leaked, attackers often use it to craft highly convincing social engineering campaigns, targeting individuals who may be particularly vulnerable. Because the company focuses on serving seniors, the impact of such a breach could be exacerbated, potentially leading to a significant loss of trust between the agency and its client base.

Furthermore, given the company's operations within the health insurance sector, the leaked data could fall under strict regulatory frameworks, such as the Health Insurance Portability and Accountability Act (HIPAA). Such a situation could potentially lead to serious legal consequences for the organization. The fact that Dragonforce operates as a group providing infrastructure to various affiliates suggests that their attack methods may vary, making them a versatile threat to various sectors.

For organizations operating in the healthcare and insurance sectors, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent security awareness training for employees to recognize phishing attempts. Additionally, strict adherence to data protection regulations and regular auditing of access controls can help mitigate the risks associated with data exfiltration and unauthorized access.