Obex Medical listed on killsec leak site

• Ransomware group: killsec
• Country: New Zealand
• Sector: Healthcare
• Announcement date: February 12, 2025

Obex Medical targeted by killsec ransomware group

The New Zealand-based healthcare organization Obex Medical has been listed on the leak site of the cybercriminal group known as killsec. The group claims to have successfully gained access to the organization's data and has initiated a countdown timer on their platform. This development follows the group's announcement on February 12, 2025, marking a significant escalation in the threat posed to the medical services provider.

Details of the claimed attack

According to the announcement made by killsec, the group has targeted the organization and is currently managing a negotiation process. The group has outlined that authorized representatives of the company should contact them to engage in discussions. This tactic is a common feature of modern ransomware operations, where attackers attempt to pressure victims into paying a ransom by threatening the release of sensitive information.

In many such incidents, ransomware groups utilize a method known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this stolen information on a public platform serves as additional leverage to compel the victim to meet financial demands. The killsec group, which has been active since 2023 and is known for conducting ransomware activities, appears to be following this pattern.

Scope of the data compromise

While the group has published a listing, specific details regarding the full scope or the exact types of data compromised remain unclear. The group has not provided information regarding the total size of the data stolen or the specific file count involved. Furthermore, no ransom demand has been publicly disclosed in the current announcement.

The available evidence from the leak site includes screenshots that display examples of invoices issued in the name of Obex Medical. Based on the information provided, the following data types have been identified as potentially affected:

• Invoice information

The lack of detailed information regarding the full extent of the breach means the total impact on the organization's digital assets remains unknown at this time.

About Obex Medical

Obex Medical is a company based in New Zealand that specializes in the distribution and service of medical devices and healthcare technologies. The organization plays a critical role in the local medical infrastructure by providing surgical equipment and clinical solutions to various hospitals and healthcare facilities.

Potential risks and industry implications

This incident may pose significant risks to the organization's operational continuity and the trust established with its customers. The leaked invoice samples could contain sensitive information regarding the organization's business partners and its internal financial processes. Such exposure can have cascading effects on the supply chain and professional relationships.

Under the privacy laws of New Zealand, the organization may be required to fulfill specific data breach notification obligations to ensure transparency and compliance. The potential publication of organizational data can lead to secondary risks, such as identity theft or targeted phishing attacks directed at employees and customers.

For organizations operating within the healthcare sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for organizations include maintaining rigorous patch management, implementing multi-factor authentication, and conducting regular employee training to recognize phishing attempts. Protecting the integrity of medical supply chains and clinical solutions is essential for maintaining patient safety and institutional trust.