Ransomware Group: QILIN

VICTIM NAME: www[.]waveny[.]org

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page details a security incident involving a healthcare organization based in the United States. The attack was publicly disclosed on June 12, 2025, nearly a week after the compromise occurred on June 5, 2025. The organization has a longstanding history of providing healthcare services since 1975, including various levels of care such as independent living, assisted living, memory care, and rehabilitation services. The leak appears to be part of a campaign targeting healthcare institutions, with the threat actors possibly claiming access to sensitive operational data.

The page indicates the potential presence of data exfiltration or threats to patient and organizational information, though no specific data types are detailed. A screenshot of what appears to be internal documents or interface screens is included, suggesting the attackers gained significant insight into the victim’s operations. Download links are available, indicating that the attackers may have leaked or plan to leak internal files. This incident underscores the ongoing cybersecurity risks faced by healthcare providers and the importance of robust defenses to protect sensitive health data and organizational integrity.