- World Leaks adds Freedman Healthcare to his data firm site
- The group claims to have exfiltrated tens of thousands of files
- The company remains silent for the moment
A cybercrime gang claims to have violated Freedman Healthcare, a consulting company based in the United States that helps states and health care organizations to manage data and have stolen thousands of sensitive files.
A threat actor called World Leaks added Freedman Healthcare to his data leak website. The group is a new participant in the cybercrime space, some saying that it is a brand change of Hunters International, while others report that it is a spin-off of the infamous organization.
In any case, the group added the consulting company to its site, but has not yet downloaded files, very likely to try to put it pressure to pay the ransom request.
Extortion as a service
The attackers claim to have stolen 42,204 files, amounting to more than 50 GB, but the nature of the stolen files is not known, and the amount of money requested.
The company manages information on the personal health of millions of Americans, including sensitive data processed in complaints of insurance and commercial insurance, state health and social services agencies, social determinants of health data sets and initiatives for health care workforce.
Freedman Healthcare has not yet discussed these statements, so we don’t even know if they are legitimate or not.
However, Hunters International has a relatively good assessment, with notable past victims, notably Toyota Brazil, Nanolumens, integrated control and Frederick Wildman and Sons.
World Leaks apparently operates on a “extortion as a service” model, launched in early 2025. The register Notes Hunters International has found their work as ransomware too risky, in particular with international law operations actively targeting these groups. This has encouraged them to go from the usual dual extortion to extortion as a service, resulting in the creation of global leaks.
The group seems to be of Russian origin and is rather active, with more than 150 victims in the past year.
