Lockbit5 ransomware group lists insightchicago.com on its leak site

• Ransomware group: Lockbit5
• Country: United States
• Sector: Healthcare
• Announcement date: December 7, 2025

Lockbit5 claims to have stolen data from Insight Hospital and Medical Center

The Lockbit5 ransomware group has listed the domain insightchicago.com on its leak site, claiming to have obtained access to the organization's data. This announcement, which appeared on December 7, 2025, suggests a significant security incident involving a prominent healthcare provider. The group has claimed that the breach occurred on September 2, 2025, though such dates are based solely on the claims made by the threat actor.

Lockbit5 is identified as a Ransomware-as-a-Service (RaaS) entity. This model of cybercrime involves developers creating ransomware and leasing it to affiliates who carry out the actual attacks. This group has been active since 2019 and reportedly returned with an updated infrastructure in February 2024. In many such ransomware attacks, groups employ a tactic known as double extortion, where they not only encrypt an organization's systems but also exfiltrate sensitive data to use as leverage during ransom negotiations.

Details of the alleged data breach

According to the announcement made by the threat actor, the volume of stolen information is approximately 200 GB. The group has described the nature of this data as 'medical secrets,' implying that the contents are highly sensitive in nature. The group has set a deadline of December 19, 2025, for the publication of this data if their demands are not met. No specific ransom demand has been disclosed in the public announcement.

The listing identifies the following types of affected information:

• Medical records

While the group has specified the volume and a general description of the data, they have not provided a specific file count. The potential exposure of such a large volume of data typically presents a major challenge for organizations attempting to assess the full scope of a breach.

About Insight Hospital and Medical Center

Insight Hospital and Medical Center is a hospital and medical center located in Chicago, providing a range of medical services. As a healthcare provider, the organization manages a vast array of sensitive information essential for patient care and administrative operations.

Implications and industry considerations

This alleged data breach may pose significant risks to patient confidentiality and data security for an entity in the healthcare sector. Given that the organization is based in the United States, a potential data breach could lead to legal sanctions and administrative investigations under HIPAA regulations. The regulatory environment for healthcare in the US requires strict adherence to privacy standards to protect patient information.

The alleged exposure of medical data may create secondary risks, such as identity theft or targeted phishing attacks against patients. When personal and medical information is leaked, it often becomes a commodity on the dark web, fueling further criminal activity. Considering the past methods of the Lockbit group, the publication or sale of this data could negatively impact the organization's operational reputation.

In general, organizations in the healthcare sector facing such claims may need to take necessary steps to verify the breach claims and inform the affected parties. Defensive strategies often include implementing robust encryption for data at rest and in transit, maintaining strict access controls, and conducting regular security audits to identify vulnerabilities before they can be exploited by RaaS affiliates.