Allegedly on May 30, 2024, the Qiulong ransomware group announced a significant data breach involving Indigo ENT Group, a company operating in the Hospital & Health Care industry and headquartered in Coquitlam, British Columbia, Canada. According to a post shared by the group, they have been infiltrating the network of Indigo ENT for several weeks, during which they claim to have exfiltrated thousands of personal, confidential, and protected health information (PHI) as well as personally identifiable information (PII) of patients.
The leaked data allegedly includes accounting and financial data, contract details, non-disclosure agreements (NDAs), and archives of emails and messages. This breach, if verified, poses a severe threat to the privacy and security of the patients and the organization.