Apex Spine & Neurosurgery Suffers Ransomware Attack, Exposing Data of 2,500 Patients Apex Spine & Neurosurgery, LLC, a U.S.-based healthcare provider, disclosed a ransomware attack that compromised the personal and medical data of approximately 2,500 individuals. The breach was first detected on December 23, 2025, when the organization identified unauthorized access to its network and the deployment of ransomware. An investigation revealed that the attacker had exfiltrated files as early as December 9, 2025. The ransomware group INTERLOCK later claimed responsibility, announcing on January 6, 2026, that it had stolen 20GB of data and posted details on a dark web site via the Tor network. The exposed data includes a broad range of sensitive information, such as: - Personally Identifiable Information (PII): Names, addresses, phone numbers, dates of birth, Social Security numbers, driver’s license and passport numbers, and other government identifiers. - Protected Health Information (PHI): Medical histories, treatment details, diagnosis codes, prescription information, assigned physicians, health service dates and locations, and payment data, including financial account numbers (without security codes) and health insurance IDs. The organization’s electronic health records platform, housed in a separate network, remained unaffected. Apex Spine & Neurosurgery reported the breach to the U.S. Department of Health and Human Services on February 6, 2026, and has since published a public notice. Direct notifications to impacted individuals will be mailed once the review is complete and addresses are verified. In response, the company is offering guidance on credit monitoring, fraud alerts, and identity theft protection, including steps for safeguarding minors’ and deceased individuals’ data. Additionally, Apex Spine & Neurosurgery is reviewing its cybersecurity practices to prevent future incidents.