Skip to content
Ransomware

Wellness Partners network listed on Inc Ransom leak site

The Inc Ransom group has listed Wellness Partners network on their leak site, alleging a data breach.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Inc Ransom
  • Country: United States
  • Sector: Healthcare
  • Announcement date: September 7, 2026

Inc Ransom claims data breach at Wellness Partners network

The ransomware group known as Inc Ransom has listed the Wellness Partners network on its dedicated leak site, alleging that the organization has been the victim of a data breach. The announcement, which appeared on September 7, 2026, marks a new instance of a threat actor targeting a provider within the healthcare sector. While the group has made these claims publicly on their platform, the incident remains an allegation by the threat actor.

According to the claims made by Inc Ransom, the group successfully gained unauthorized access to the systems belonging to the Wellness Partners network. The threat actors assert that they have exfiltrated data from the organization's network during this intrusion. To support their claims, the group has published certain sample documents on their platform that appear to be related to the internal operations of the organization.

Details regarding the alleged data exfiltration

Despite the claims made by the threat actor, specific details regarding the scope of the breach remain limited. The group has not provided information regarding the exact size of the data stolen or the total number of files involved in the incident. Furthermore, no ransom demand has been specified in the public announcement.

Regarding the specific types of information that may have been compromised, the listing does not name any specific data types. While the group provided screenshots to serve as evidence of the breach, the documents shown in these images are blurred. This lack of clarity makes it impossible to identify the specific categories of data or the exact nature of the information contained within the files.

About Wellness Partners network

The Wellness Partners network is a healthcare-oriented organization headquartered in Clinton, New York. It operates as a faith-based non-profit organization dedicated to providing a variety of essential services to the community. The organization's mission involves providing healthcare, housing, and various community support services.

Specifically, the organization is known for offering residential medical support services and 24/7 skilled nursing care. These services are primarily designed to support older adults, ensuring they receive necessary medical attention and housing assistance within a community-focused framework.

Analysis and potential risks for the healthcare sector

The targeting of an organization operating in the healthcare sector presents significant concerns regarding patient privacy and the potential exposure of sensitive personal information. Because the Wellness Partners network is based in the United States, such an incident may trigger legal proceedings and regulatory sanctions under established frameworks, such as the Health Insurance Portability and Accountability Act (HIPAA).

The tactics employed by Inc Ransom appear to follow a double-extortion model. In this scenario, threat actors do not merely encrypt an organization's data to demand a ransom for decryption; they also steal sensitive information and threaten to publish it publicly to increase the pressure on the victim. This method is designed to force the organization into compliance by leveraging the threat of reputational damage and legal consequences resulting from data exposure.

If the stolen data is indeed released, secondary risks may emerge for the affected individuals. These risks include the potential for identity theft and the possibility of targeted phishing attacks, where attackers use the stolen information to deceive victims. Organizations in this sector often focus on defensive measures such as robust encryption, strict access controls, and continuous monitoring to mitigate these types of threats. However, the evolving nature of ransomware groups continues to pose a significant challenge to the security of sensitive healthcare data.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories