A ransomware group calling itself Barracuda claims to have carried out an attack on Clinical Associates of the Finger Lakes (CAFL), with the claim dated August 23, 2026. This claim comes from an entry on the group’s own leak-site listing, which is tracked and archived by ransomware.live, a security research platform that monitors public-facing extortion sites run by ransomware groups. At this stage, the claim has not been confirmed by Clinical Associates of the Finger Lakes (CAFL), nor has it been verified by any independent regulator or law enforcement body. BreachLetter is reporting on the existence of this claim, not on a confirmed data breach.
What we know — and don’t
- A group identifying itself as Barracuda posted a claim referencing Clinical Associates of the Finger Lakes (CAFL) on its leak site, dated August 23, 2026.
- Clinical Associates of the Finger Lakes (CAFL) appears to operate in the healthcare sector, based on its name and publicly known activity.
- The specific types of data the group claims to have obtained have not been disclosed or confirmed as part of this listing.
- No confirmation of the incident has been issued by the company, and no regulatory filing or public breach notification has been identified at this time.
- Claims made on ransomware leak sites are statements by the criminal group itself and are not independently verified at the time of posting.
What should you do if you have an account with this company?
- Change your password for any account or patient portal associated with Clinical Associates of the Finger Lakes (CAFL), and avoid reusing that password elsewhere.
- Enable two-factor authentication wherever it is offered, particularly for email, financial, and healthcare-related accounts.
- Be cautious of unexpected calls, texts, or emails referencing this company, especially ones asking you to confirm personal, medical, or payment details — these could be phishing attempts capitalizing on the claim.
- Review recent account activity, billing statements, and explanation-of-benefits notices for anything unfamiliar.
- Consider using a service like a service like Aura or LifeLock to monitor for signs your personal information is being misused elsewhere, since identity monitoring can help catch problems early even before a breach is confirmed.
- Keep records of any suspicious communications in case they become relevant if the incident is later confirmed.
BreachLetter will update this article if Clinical Associates of the Finger Lakes (CAFL) confirms this incident, issues a public statement, or if the matter is officially reported to regulators.