Pulmonary Services Group listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Puerto Rico
• Sector: Healthcare
• Announcement date: September 30, 2026

Pulmonary Services Group targeted by thegentlemen

The healthcare provider Pulmonary Services Group has been listed on a leak site associated with the threat actor known as thegentlemen. This announcement, posted on September 30, 2026, indicates that the organization has been targeted in a data breach operation by the group.

In modern cyberattack trends, ransomware groups often employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. The threat actors then use the threat of leaking this stolen data on public or semi-public leak sites to pressure the victim into paying a ransom. This method significantly increases the pressure on an organization, as the risk shifts from mere operational downtime to the public exposure of sensitive, regulated information.

Details of the claimed attack

According to the announcement published by thegentlemen, the group claims to have compromised data belonging to Pulmonary Services Group. The threat actor alleges that the attack took place on September 29, 2026. Following the alleged intrusion, the group initiated a process by threatening to release the institution's data to the public.

At this stage, the threat actor has not provided specific details regarding the nature of the leaked or threatened data. Furthermore, no screenshots or specific evidence have been provided by the group to substantiate their claims. The listing currently lacks information regarding the total size of the data or the specific number of files involved in the alleged breach.

About Pulmonary Services Group

Pulmonary Services Group is a healthcare entity based in Puerto Rico. The organization operates as a three-company group that provides specialized medical services and equipment. Their expertise includes providing home medical equipment and respiratory therapy services. Specifically, the group specializes in home mechanical ventilation for patients who are ventilator-dependent, as well as sleep apnea treatment. Additionally, they are involved in the provision of various types of home-care medical equipment.

Potential risks and industry implications

This incident presents a significant risk of exposure for both patient and operational data within Pulmonary Services Group. Because the organization operates within the healthcare sector, any actual leak of data could lead to serious legal consequences under local regulations and United States health standards regarding the protection of Protected Health Information (PHI). The exposure of such sensitive information can lead to secondary risks, such as identity theft or targeted phishing attacks directed at the patients served by the group.

Furthermore, the incident may create secondary risks for the organization's supply chain partners and patients. In the healthcare industry, the interconnected nature of providers, insurers, and equipment suppliers means that a breach in one entity can potentially impact the security posture of the broader ecosystem.

While the technical capabilities and specific motivations of thegentlemen remain uncertain due to the limited amount of public information available about the group, the incident highlights the ongoing threat to healthcare providers. Organizations in this sector often focus on defensive measures such as implementing robust access controls, maintaining strict data encryption standards, and conducting regular security audits to mitigate the risk of unauthorized access to sensitive medical records and operational files.

• No data types were specified in the listing.