[SARCOMA] – Ransomware Victim: Sanderling
![[SARCOMA] - Ransomware Victim: Sanderling 1 image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png)
Ransomware Group: SARCOMA
VICTIM NAME: Sanderling
NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SARCOMA Onion Dark Web Tor Blog page.
AI Generated Summary of the Ransomware Leak Page
The ransomware leak page pertains to a healthcare organization that specializes in providing dialysis and nephrology services, primarily serving rural and underserved communities across the United States. The breach involved an extensive dataset, including sensitive patient information, full backup archives, and company documents. The data leaked comprises decades of private records, such as personal health information (PHI), contact details, identification documents, and other confidential data. The leak emphasizes the presence of highly sensitive and potentially damaging information, which was allegedly extracted from the company’s comprehensive backups and internal files. The breach date is identified as July 3, 2025, indicating when the data compromise was discovered.
The leak indicates the availability of an undisclosed volume of data, including full backups containing patient records, PHI, and internal company documentation. It mentions that the leak includes full copies of company backups, with the potential exposure of data spanning over 25 years of operations. The files include personal identification, contact details, and healthcare information, which pose significant privacy and security concerns. The profile of the compromised data also comprises emails, phone numbers, addresses, and social security numbers. Screenshots or images related to the leak are not provided, but the description suggests the potential exposure of critical private medical and personal data pertaining to thousands of individuals. The data is marked as exclusive, indicating it cannot be sourced from other places, highlighting the severity and uniqueness of the breach.
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.