[GENESIS] – Ransomware Victim: I-Tek Medical Technologies
![[GENESIS] - Ransomware Victim: I-Tek Medical Technologies 1 image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png)
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the GENESIS Onion Dark Web Tor Blog page.
AI Generated Summary of the Ransomware Leak Page
On October 13, 2025, I-Tek Medical Technologies, a United States–based provider of contract design, development, and manufacturing for the healthcare sector, was listed on a ransomware leak page as a victim. The page presents a concise company profile, noting revenue of $6 million and including a link to the firm’s site, defanged as hxxps://i-tekmedical[.]com. The excerpt suggests a standard victim entry used by extortion actors when announcing a data-leak incident, with the focus placed on the victim name and business description rather than detailed background on the attacker.
The leak page enumerates nine downloadable data archives described as “Download company data archives,” organized across multiple parts. This indicates the attackers claim to have exfiltrated internal data and prepared multiple archives for potential publication or delivery. The page includes no screenshots or images (the page reports zero images). No explicit compromise date is provided in the excerpt; given the key date of 2025-10-13, this should be interpreted as the post date. There is no stated ransom amount or demand in the available text, though the presence of downloadable archives aligns with a data-leak scenario rather than a simple encryption event. The page uses a defanged link to corroborate the victim identity, pointing to the defanged site hxxps://i-tekmedical[.]com.
Support Our Work
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.