A ransomware group calling itself Anubis claims to have carried out an attack against Interim HealthCare [Head office], according to a listing posted on the group’s own leak site and tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. The claim is dated August 21, 2026. This is an unverified claim made by a criminal group; Interim HealthCare has not confirmed the incident, and no regulator has confirmed it either.
What we know — and don’t
- The claim was posted to Anubis’s leak site and logged by ransomware.live on August 21, 2026.
- Interim HealthCare operates in the healthcare sector, which often involves sensitive patient and employee information, though this does not confirm what, if anything, was actually accessed.
- The specific types of data the group claims to have obtained have not been disclosed publicly or confirmed by any party.
- Interim HealthCare has not issued a public statement confirming or denying this claim as of this writing.
- No regulatory filing or breach notification tied to this claim has been identified at this time.
What should you do if you have an account with this company?
- Change your password for any account associated with Interim HealthCare, and avoid reusing that password elsewhere.
- Enable two-factor authentication (2FA) wherever it is offered, particularly on email and financial accounts.
- Be alert to phishing attempts, including emails, texts, or calls that reference healthcare services, appointments, or billing and try to pressure you into clicking a link or sharing information.
- Monitor your bank and insurance statements for unfamiliar activity, since healthcare-related data can sometimes be used for medical or insurance fraud.
- Consider a service like a service like Aura or LifeLock for identity monitoring, so you can be alerted quickly if your personal information appears somewhere it shouldn’t.
- Keep records of any suspicious communications in case they are needed later for reporting to your bank, healthcare provider, or relevant authorities.
This claim remains unverified. BreachLetter will update this page if Interim HealthCare confirms the incident, if further details emerge from credible sources, or if the matter is officially reported to regulators.