Rhysida Ransomware Attack on Harbour Town Doctors

**Rhysida Ransomware Group Claims Attack on Queensland Medical Centre, Threatens Patient Data Sale** The Rhysida ransomware group has listed **Harbour Town Doctors**, a Queensland-based medical centre, as a victim on its dark web extortion site. The attack was publicly claimed on **December 11**, with the group posting low-resolution images of allegedly stolen data, including files bearing the clinic’s letterhead, **patient health summaries**, medical record transfer requests, and pathology reports. Rhysida set a **seven-day ransom deadline** and is currently offering the data for sale to a single buyer for **five Bitcoin (approximately $137,000)**. The group stated that the data would be sold exclusively, with no resale permitted, framing it as a "unique opportunity" for potential buyers. Harbour Town Doctors has not responded to requests for comment. **About Rhysida** Rhysida is a **ransomware-as-a-service (RaaS) operation**, first observed in mid-2023, with **254 claimed victims** to date. The financially motivated group, which communicates in Russian, has a history of targeting the **healthcare sector**. Notable past attacks include: - **Prospect Medical Holdings (August 2023)**: Disrupted 17 hospitals and 166 clinics in the U.S., exposing **500,000 Social Security numbers, medical records, and passport details**. - **Sunflower Medical Group (January 2025)**: Allegedly stole **three terabytes of data**, impacting over **400,000 patients**. - **Daughterly Care (September 2024)**: A Sydney-based aged-care provider, marking Rhysida’s previous Australian healthcare victim. **About Harbour Town Doctors** Located in **Biggera Waters, Queensland**, the clinic provides **family medicine, skin cancer treatment, and chronic disease management**, employing five doctors and administrative staff. The centre markets itself as offering **personalised, team-based care** through experienced healthcare professionals.