[NIGHTSPIRE] – Ransomware Victim: ChangShen Hospital, Taiwan

image

Ransomware Group: NIGHTSPIRE

VICTIM NAME: ChangShen Hospital, Taiwan

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the NIGHTSPIRE Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to ChangShen Hospital, a healthcare institution located in Taiwan. The incident was discovered on April 19, 2025, with the attack having occurred earlier on April 13, 2025. The breach resulted in the unauthorized access and potential exfiltration of approximately 800 gigabytes of data. Details about the specific nature of the compromised information have not been disclosed, indicating a focus on the scale rather than the content. The leak was associated with the cybercriminal group “nightspire,” emphasizing the organized nature of the attack. No sensitive or personally identifiable information has been explicitly revealed, but the data breach impacts a major medical provider in Taiwan.

The leak page indicates the presence of stolen data, with potential download links available, and includes visual evidence such as screenshots of internal documents. The attack highlights ongoing cybersecurity threats to healthcare organizations, especially in the Asia-Pacific region, and underscores the importance of robust defense measures. No specific details about the data types, such as patient records or proprietary information, are publicly disclosed. The incident underscores the growing threat of ransomware targeting critical infrastructure, including hospitals, which can significantly impact healthcare operations and patient safety.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.