Performance Health & Fitness listed on Hunters International leak site

• Ransomware group: Hunters
• Country: United States
• Sector: Healthcare
• Announcement date: November 19, 2024

Performance Health & Fitness targeted by Hunters International

The healthcare service provider Performance Health & Fitness has been listed on the leak site associated with the threat group known as Hunters International. The announcement, which surfaced on November 19, 2024, follows allegations of a significant data breach involving the organization.

Claims of data exfiltration and encryption

The threat group identified as Hunters International claims to have successfully carried out a cyberattack against Performance Health & Fitness. According to the group's announcement, the organization's data has been both exfiltrated and encrypted by the attackers. This dual-action approach is a hallmark of modern ransomware operations, where attackers aim to maximize leverage over their victims.

Ransomware leak sites serve as a platform for these threat actors to exert pressure on their targets. By publishing information about a victim, the group attempts to damage the organization's reputation or force a ransom payment through the threat of public data exposure. This tactic is often referred to as double extortion, where the attacker not only locks the victim's systems but also threatens to release sensitive information to the public.

Details of the alleged data breach

While the threat group has made specific claims regarding the volume of information stolen, they have not provided a detailed breakdown of the specific types of data compromised. The listing names no specific data types or categories of information.

According to the claims made by Hunters International, the stolen data includes:

• A total volume of 35.1 GB of data
• A collection consisting of 60,734 files

The announcement was officially published on the group's leak platform on November 19, 2024, coinciding with the date the group claims the attack occurred.

About Performance Health & Fitness

Performance Health & Fitness is a service provider based in the United States that operates within the health, fitness, and personal training sector. The organization provides professional guidance and various sports facilities to individuals, assisting them in the pursuit of their physical health goals.

Risk assessment and sector implications

The Hunters International group is assessed to have emerged in 2023 and is believed to utilize the Hive ransomware codebase. Although there are reports suggesting that the group may have ceased its encryption activities as of 2025, the presence of data on leak sites indicates that double-extortion tactics remain a significant part of their operational model.

Given that Performance Health & Fitness operates in the healthcare sector, there is a potential risk that sensitive patient information may be included in the exfiltrated data. Such a breach could lead to significant regulatory consequences under frameworks such as the Health Insurance Portability and Accountability Act (HIPAA). Furthermore, the exfiltration of data poses secondary risks to both employees and customers, including the potential for identity theft or the execution of targeted phishing attacks.

For organizations operating in the healthcare and fitness sectors, maintaining robust security postures is critical. Defensive measures often include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized data movement. Protecting sensitive personal and health-related information is essential to mitigating the legal and reputational damage that follows a data breach.