Skip to content
Ransomware News

Ransomware Group exitium Hits: Gastroenterology and Hepatology of CNY

Admin
HookPhish team

Summary

In the latest cybersecurity news, Gastroenterology & Hepatology of CNY — a company operating in the NY — has fallen victim to a ransomware attack conducted by the group exitium. This data breach, discovered on 2026-04-14 20:06:20.603210, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.

Incident Report

Attribute Information
Target Organization Gastroenterology & Hepatology of CNY
Threat Group exitium
Summary Website: gandhofcny.com
Zoominfo: https://www.zoominfo.com/c/gastroenterology–hepatology-of-cny-pc/346091487

Data sample, whole internal data will be sold if they wouldn’t pay ransom.

Also Digestive Disease Center of CNY, LLC (ddcofcny.com)

GI practice + AAAHC-accredited endoscopy center. Syracuse, New York, USA.

Full database for sale — 167,303 patients, 124,761 SSN, 49,798 with sensitive diagnoses:
– 167,303 patients — 124,761 with SSN, 166,402 (99%) with address, 164,296 (98%) with phone, 85,318 (51%) with email
– 1,093,863 diagnoses (ICD-10), 1,547,142 medications, 186,246 pathology specimens with narrative reports
– Sensitive (dx + meds): 49,798 patients — 44,861 with SSN. Mental health: 43,902 | Substance/Alcohol: 5,111 | STIs: 2,779 | Cancer: 2,708 | Hepatitis C: 1,906
– Includes notable individuals (politicians, businesspeople, public figures)

Date of Breach 2026-04-14 20:06:02.389513
Discovery Date 2026-04-14 20:06:20.603210
Region NY
Business Sector Healthcare

 

Recommended Security Actions

In response to increasing cyber threats, it’s critical to protect your organization with proactive security measures. HookPhish provides enterprise-grade solutions designed to reduce your risk of future attacks:

Protect your organization before it becomes the next headline. Explore HookPhish.

How HookPhish Helps You Stay Ahead

Don’t wait for a breach to take action — stay informed and take control of your cybersecurity posture today.

You can also check if your organization’s data has been exposed using our free Data Breach Checker.

Disclaimer

HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

Related articles

Security training designed for people.

See how HookPhish turns phishing simulation, training and threat monitoring into measurable human-risk reduction.

Book a demo Explore solutions