WVPCA listed on bravox ransomware leak site

• Ransomware group: bravox
• Country: United States
• Sector: Healthcare
• Announcement date: February 11, 2026

The threat actor bravox claims to have breached WVPCA

The healthcare organization West Virginia Primary Care Association (WVPCA) has been listed on a leak site by the threat actor known as bravox. This announcement, made on February 11, 2026, follows a claimed attack that occurred several months prior. The listing indicates a potential data breach involving a significant volume of information belonging to the organization.

According to the claims made by the bravox group, they have leaked 203.3GB of data belonging to WVPCA on their dedicated leak site. The threat actor alleges that they successfully gained access to this data following an attack that is stated to have occurred on May 15, 2025. The group asserts that this breach was the result of an action taken against the organization's network infrastructure, which allowed them to obtain various corporate and financial documents.

Details of the alleged data leak

The information provided by the threat actor suggests that the breach involves a variety of sensitive documentation. Based on screenshots provided by the group, the stolen data reportedly includes agreements with the West Virginia Department of Health and Human Resources, as well as documents that were explicitly marked as confidential. Furthermore, the leaked files are said to contain DocuSign order forms, credit card authorization forms, and various other financial records.

The specific types of data identified as being affected by this alleged incident include:

• Financial records
• Contracts
• Credit card information
• Corporate correspondence

While the group has posted these claims on their leak site, no ransom demand has been specified in the public announcement.

About the West Virginia Primary Care Association

The West Virginia Primary Care Association (WVPCA) is an organization that supports and develops a network of community health centers throughout West Virginia. Its primary mission involves working to promote the expansion of quality and accessible healthcare services across the state.

Potential risks and industry implications

This leak may pose significant risks to the organization's operational processes and its overall financial security. The presence of credit card details and contract information among the leaked documents could lead to identity theft or facilitate targeted phishing attacks against both employees and business partners. Because the organization is a US-based healthcare entity, this incident may trigger data breach notification obligations and legal sanctions under HIPAA regulations.

Furthermore, the organization's various relationships with third-party partners may increase the risk of supply chain vulnerabilities. In the broader context of cybersecurity, ransomware groups often utilize a