Inc Ransom ransomware group lists hsc.mb.ca on its leak site

• Ransomware group: Inc Ransom
• Country: Canada
• Sector: Healthcare
• Announcement date: October 11, 2026

Inc Ransom claims data exfiltration from Health Sciences Centre

The Health Sciences Centre (HSC) in Winnipeg has been listed on the leak site of the ransomware group known as Inc Ransom. The threat actors claim to have successfully compromised the organization and exfiltrated sensitive data belonging to the institution. This announcement, made on October 11, 2026, follows an alleged attack date of August 10, 2026.

Inc Ransom is recognized as a double-extortion ransomware actor that first emerged in mid-2023. In double-extortion schemes, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release stolen data publicly, these groups aim to exert maximum pressure on the victim to meet ransom demands, even if the organization has robust backups to restore their systems.

Regarding the specific details of the incident, the group has not provided information regarding the total size of the stolen data, the specific file count, or the amount of the ransom demand. The group's motivation for the public disclosure, according to their claims, stems from an allegation that the institution's management has not been transparent regarding the breach.

Alleged data types involved in the breach

The threat actors claim to have obtained a wide variety of sensitive information during their operation. The data allegedly stolen from the Health Sciences Centre includes highly sensitive information that could impact both patients and staff members. The specific categories of data mentioned in the claim include:

• Patient medical records
• Employee HR data
• Financial records
• Insurance information
• Internal communications
• Network configuration documents

The exposure of such a diverse range of data, particularly network configuration documents, introduces significant risks. While medical records pose immediate privacy concerns, the theft of technical documentation can provide a roadmap for future malicious activities against the network.

About the Health Sciences Centre

The Health Sciences Centre (HSC) is one of the largest hospitals and health centers in Manitoba. Located in Winnipeg, the institution provides comprehensive medical care, diagnostic, and treatment services to patients in the region.

Potential impact and security considerations

If the claims made by Inc Ransom are accurate, the exposure of this sensitive medical data could lead to significant privacy violations for patients. Such an incident may trigger legal scrutiny under Canadian health data protection regulations. The individuals involved in the breach could face an increased risk of identity theft or targeted phishing campaigns using the stolen information.

Furthermore, the potential exposure of network configuration documents could create secondary risks for future security incidents. When technical details about a network's architecture are leaked, it can provide attackers with the intelligence needed to bypass security controls in subsequent attacks.

For organizations in the healthcare sector, these types of incidents underscore the critical importance of robust data protection strategies. Defensive measures often include implementing strict access controls, utilizing encryption for data at rest and in transit, and maintaining continuous monitoring of network traffic to detect unauthorized exfiltration. Additionally, maintaining comprehensive incident response plans and ensuring transparency during a breach can be vital for managing the legal and reputational consequences of a cyberattack.