a ransomware gang hijacked a hospital's Facebook page to brag about what it stole

AnMed Health closed 83 facilities after a July cyberattack. Two weeks later, the hackers posted the proof themselves — from AnMed's own account.

Aliteq
Priya Nair · Software & Systems Editor

The confirmed timeline

July 26, 2026: AnMed detects a cybersecurity disruption involving malware and closes 83 of its 106 facilities the next day.

The confirmed timeline

July 27: attackers reportedly give AnMed a 72-hour deadline to respond to their demands.

The confirmed timeline

August 10: The Gentlemen ransomware group publicly claims responsibility.

The confirmed timeline

August 11: over 100 posts appear on AnMed's hijacked official Facebook page, claiming a 6TB data theft.

The confirmed timeline

As of publication, AnMed has not confirmed the attackers' claims about what — or whether — patient data was stolen.

Watch for the second attack

Healthcare IT News has already flagged a payment scam circulating around this incident — someone impersonating AnMed or a collections agency, capitalizing on the confusion to extract real money from…

Aliteq

Read the full story

a ransomware gang hijacked a hospital's Facebook page to brag about what it stole

 Read the full story on Aliteq