Signature Healthcare Discloses Data Breach Affecting U.S. Patients Signature Healthcare Corp., a nonprofit integrated healthcare system based in Brockton, Massachusetts, has reported a data breach impacting individuals across the United States. The organization, which provides a broad range of medical services including emergency care, primary care, cardiology, psychiatry, and nursing education filed the disclosure with the U.S. Department of Health and Human Services on June 5, 2026. As of June 30, 2026, limited details about the breach have been made public. The specific types of compromised data whether personal, medical, or both remain undisclosed. Given Signature Healthcare’s role in patient care, the exposed information may include sensitive health records. The organization has directed potentially affected individuals to contact its offices or visit its website for further updates. Additional details about the incident, including the cause, scope, and remediation efforts, have yet to be released. The situation remains under review as more information becomes available.

Ransomware Attack on Puerto Rico’s Hospital Caribbean Medical Center Exposes 92,000 Records On June 9, 2026, Hospital Caribbean Medical Center in Fajardo, Puerto Rico, reported a data breach affecting 92,000 individuals to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights. The incident stemmed from a ransomware attack in February 2026, claimed by the The Gentlemen ransomware group. The hospital detected the attack in early March, swiftly implementing containment measures with support from external cybersecurity experts. While systems were restored to normal operation, a forensic analysis remains ongoing to determine the full scope of the breach. Authorities were notified, and the hospital is cooperating with investigators. On February 17, 2026, The Gentlemen listed the hospital on its data leak site, threatening to release stolen data within 10 days if ransom demands were not met. The hospital has not confirmed whether a ransom was demanded or paid, nor how the attackers gained access. ### The Gentlemen: A Rising Ransomware Threat First active in September 2025, The Gentlemen has claimed 328 attacks, with 24 confirmed, including four on healthcare providers: - The Devereux Foundation (US, November 2025) - Unimed Anápolis (Brazil, January 2026) - IntraCare (New Zealand, March 2026) The group employs double-extortion tactics, encrypting systems while stealing data to pressure victims. In 2026 alone, it has listed 254 victims, with 22 confirmed. ### Healthcare Under Siege: A Growing Trend The attack on Hospital Caribbean Medical Center ranks as the second-largest ransomware breach in healthcare this year, following Nippon Medical School Musashi Kosugi Hospital (Japan, 131,700 records) in February. Other recent incidents include: - Signature Healthcare (US, April 2026) – Hit by Anubis, disrupting services for 10 days and allegedly stealing 2 TB of data. - Bendigo & District Aboriginal Co-operative (Australia, April 2026) – Targeted by INC, with limited service impact. - Minidoka Memorial Hospital (US, April 2026) – Attacked by Blackwater, disrupting medical imaging and exposing 577 GB of data. In 2026, 27 confirmed ransomware attacks on healthcare providers have been recorded, with 122 additional unconfirmed incidents under monitoring. Hospital Caribbean Medical Center, a 45-bed facility with four ICU beds, serves as a critical healthcare provider in Puerto Rico. The breach underscores the escalating targeting of medical institutions by ransomware groups, with significant operational and patient data risks.