Minnesota Hospital listed by radiant ransomware group

• Ransomware group: radiant
• Country: United States
• Sector: Healthcare
• Announcement date: October 12, 2025

The threat group known as radiant has listed Minnesota Hospital on their leak site, alleging a data breach. This announcement, made on October 12, 2025, marks a new development in the ongoing landscape of targeted cyberattacks against healthcare infrastructure.

Details of the claim

The radiant group published an announcement targeting Minnesota Hospital on October 12, 2025. According to the threat actor, the institution is facing a countdown regarding its response to the breach. The group has stated that if the institution does not make contact within seven days, they will proceed to expose the hospital's name and initiate pressure processes. This tactic is a hallmark of modern ransomware operations, where attackers use the threat of public exposure to coerce victims into compliance.

Information regarding the specific identity and background of the radiant group remains limited in the public domain. Such groups often operate with a high degree of anonymity, making it difficult for security researchers to attribute the attack or understand the group's long-term motivations. The use of a countdown timer or a specific deadline is a common psychological pressure tactic used by these actors to force rapid decision-making from the victim organization.

Data and evidence

At this stage of the incident, the group has not provided specific evidence to support their claims. No screenshots or detailed information regarding the nature or content of the leaked data have been provided. Furthermore, the listing does not specify the volume of data involved or the specific types of files that may have been compromised.

• The listing names no data types.

In many ransomware scenarios, attackers employ a strategy known as double extortion. In this model, the threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of leaking this stolen information on a public leak site serves as secondary leverage to ensure the victim pays the ransom, even if they have robust backups to restore their systems.

Potential risks and implications

If the leak allegation is verified, significant risks may arise regarding the privacy of patient data within the healthcare institution. Because the organization is located in the United States, the potential breach of sensitive information could trigger specific legal consequences. Specifically, data breach notification obligations and legal sanctions under HIPAA regulations may be triggered due to the sensitive nature of healthcare information.

The potential exposure of data could lead to secondary risks for the individuals involved, such as identity theft or targeted phishing attacks for patients. When personal or medical information is leaked, it often becomes a commodity on dark web forums, where it can be used to conduct highly convincing social engineering attacks against the original victims.

Furthermore, the group's pressure tactics may threaten the institution's operational continuity and could have adverse effects on the supply chain. For healthcare providers, any disruption in data availability or the integrity of information can impact patient care and the coordination of medical services. Organizations in this sector typically focus on robust defensive measures, such as implementing strict access controls, maintaining offline backups, and conducting regular security awareness training to mitigate these evolving threats.

Summary of the situation

As of the current reporting, the situation remains centered on the claims made by the radiant group. The healthcare sector remains a high-priority target for ransomware groups due to the critical nature of the data they manage and the urgent need for operational uptime. The incident involving Minnesota Hospital highlights the continuous need for vigilance and rapid incident response capabilities within the healthcare industry.