[NIGHTSPIRE] – Ransomware Victim: Hospital José Agurto Tello de Chosica

image

Ransomware Group: NIGHTSPIRE

VICTIM NAME: Hospital José Agurto Tello de Chosica

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the NIGHTSPIRE Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The leak page pertains to a ransomware attack targeting the Hospital José Agurto Tello de Chosica, a healthcare facility located in Peru. The attack was discovered on June 2, 2025, and is associated with the group known as Nightspire. The compromised data involves approximately 30 GB of sensitive information, which indicates a significant breach impacting the hospital’s operations and patient data security. The attack date is recorded as May 28, 2025. The page does not include specific screenshots or press releases but highlights the serious nature of the data leak in the healthcare sector.

Details about the leaked data emphasize its large volume, which could include confidential medical records, administrative documents, or other sensitive information stored by the hospital. The leak page indicates the presence of data exfiltration and makes references to data being made accessible, without providing direct download links. The incident underscores the growing threat of cyberattacks targeting healthcare institutions, especially those that hold valuable patient and administrative data. The hospital’s domain is publicly accessible, but particular details about the extent of the data or specific compromised systems are not disclosed. Overall, this breach highlights the ongoing risks faced by healthcare providers in the digital age.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.