Right at Home Care listed by Sinobi ransomware group

• Ransomware group: Sinobi
• Country: United States
• Sector: Healthcare
• Announcement date: October 8, 2025

The Sinobi ransomware group has listed the healthcare organization Right at Home Care on its leak site. According to the announcement made on October 8, 2025, the threat actor claims to have acquired a significant amount of data from the victim organization.

The alleged attack and ransom demand

The threat actor known as Sinobi has listed Right at Home Care on its leak site, alleging the acquisition of 50 GB of data. The group claims that the breach occurred around September 2, 2025. In the announcement, the group has specified a ransom demand of 5,000,000 $ from the organization to prevent further exposure or to facilitate the return of data.

Ransomware attacks often involve a tactic known as double extortion, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to leak stolen data on public or private leak sites, attackers increase the pressure on the victim to pay the ransom. In this specific instance, the group's motivations appear to be heavily driven by financial gain, as evidenced by the high ransom demand.

Publicly available information regarding the Sinobi group remains limited, making it difficult to ascertain the full scope of their operations or their typical methodology beyond this specific claim.

Data involved in the claim

The announcement made by the Sinobi group indicates that the compromised data includes sensitive information. The group claims to have access to the following types of data:

• Customer data
• Contracts

The presence of such data in a leak listing poses significant risks to the organization and the individuals whose information is involved. When sensitive documentation and personal details are targeted, the impact can extend far beyond the immediate digital infrastructure of the victim.

About Right at Home Care

Right at Home Care is a healthcare organization that provides personalized home care services to help individuals maintain their independence in a home setting. The company offers support with daily living activities, companionship, and specialized care for conditions such as Alzheimer's and dementia.

Impact and industry implications

The alleged leak of sensitive customer information from a healthcare provider may increase the risk of identity theft and fraud for the affected individuals. Because healthcare organizations handle highly personal information, the exposure of such data can lead to significant secondary risks, such as targeted phishing attacks against the organization's clients. These attacks often exploit the trust established between a service provider and its clients to gain further access or financial assets.

Furthermore, the exposure of health-related data could lead to legal and regulatory consequences for the organization under HIPAA regulations in the US. Regulatory frameworks like HIPAA are designed to ensure the privacy and security of protected health information, and failures in data protection can result in substantial penalties and oversight.

For organizations operating within the healthcare sector, maintaining operational continuity and protecting their reputation is critical. A successful ransomware attack can disrupt essential services and damage the trust that patients and families place in care providers. To mitigate these risks, organizations typically focus on robust defensive measures, such as implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to defend against phishing and other social engineering tactics. The high ransom demand in this case highlights the significant financial pressure these groups place on healthcare entities to resolve these incidents quickly.