- World Leaks adds Freedman Healthcare to your data filtration site
- The group claims to have extended tens of thousands of files
- The company remains silent for now
A cyber gang claims to have raped Freedman Healthcare, a consulting firm based in the United States that helps states and medical care organizations to handle data, and allegedly stole thousands of confidential archives.
A threat actor called World Leaks added Freedman Healthcare to his data leakage website. The group is a new participant in the cyber crime space, and some say it is a change of brand of Hunters International, while others report that it is a spin-off of the infamous organization.
In any case, the group added the consulting company to its site, but it has not yet charged any file, with a greater probability of trying to press it to pay the rescue demand.
Extortion as a service
The attackers claim to have stolen 42,204 files, ascending to more than 50 GB, but the nature of the stolen files is not known, nor is the amount of money requested.
The company manages the personal health information of millions of Americans, including confidential data processed in medical and commercial insurance claims, state health agencies and human services, social determinants of health data sets and initiatives of medical care for force.
Freedman Healthcare has not yet addressed these statements, so we don’t even know if they are legitimate or not.
However, Hunters International has a relatively good history, with previous notable victims such as Toyota Brazil, Nanolumenos, Integrated Control and Frederick Wildman and Sons.
World Leaks apparently works in a “extortion as a service” model, launched in early 2025. The registration Notes Hunters International found that his ransomware work was too risky, especially with international operations for the application of the law that actively lead to these groups. This led them to change the usual double extortion tactics to extortion as a service, resulting in the creation of world leaks.
The group seems to be of Russian origin, and is quite active, with more than 150 victims in the last year.