Clínica La Sagrada Familia (Colombia) Data Breach: Whitearmor Ransomware Claim (Nov 2026)
Summary
In the latest cybersecurity news, Clínica La Sagrada Familia (Colombia) — an organization based in CO — has fallen victim to a ransomware attack conducted by the group Whitearmor. This data breach, discovered on 2026-11-08T03:33:23.256858+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Clínica La Sagrada Familia (Colombia) |
| Threat Group | Whitearmor |
| Summary | Clínica La Sagrada Familia S.A.S, a private healthcare provider in Colombia’s Eje Cafetero region. It offers medium and high-complexity medical services, online appointment scheduling, and features advanced technology like a 160-slice CT scanner.
We hold, in short: 254,670 patient identities with Colombian government IDs, ~598.7M rows of clinical + financial + identity data across 4,573 tables from a Colombian hospital’s full production database, including MD5-hashed staff credentials, 691K admissions, 34.5M medical-history rows, 1.5M invoices, and complete pharmacy/lab operations. We demand $2,000,000 in BTC, emails with instructions have been sent to you. If you have not received them, you can find our contacts below. Email: [email protected] |
| Date of Breach | 2026-11-08T02:45:00+00:00 |
| Discovery Date | 2026-11-08T03:33:23.256858+00:00 |
| Region | CO |
| Business Sector | Healthcare |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- keep watch on the dark web — close the gap attackers exploit.
- real-time breach alerts — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
