adioscancer.com Listed by lockbit3 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 12, 2024, adioscancer.com, the online presence of the Caribbean Radiation Oncology Center, was listed by the lockbit3 ransomware group. The group claims that internal files were exfiltrated during a ransomware attack. The number of people affected is unknown, and public detail on the scale or precise contents remains limited. For anyone who has received care, worked with, or shared information with the center, the listing raises practical questions about whether personal or medical details could now be at risk of misuse.

Medical facilities of this kind routinely handle information that is both private and hard to change once exposed. Even when exact data types stay unconfirmed, a claimed ransomware incident involving internal files creates real stakes for identity security, privacy, and peace of mind among patients and staff.

Inside the incident

Public reporting states that adioscancer.com was listed by lockbit3 on or around February 12, 2024. The available summary identifies the organization as the Caribbean Radiation Oncology Center and describes the event as a ransomware attack in which internal files were allegedly exfiltrated. No figure has been given for the number of individuals affected. Timing of the initial intrusion, the technical method used, the volume of data taken, and any ransom demand or negotiation details have not been disclosed in the material available for this account.

Because the primary public signal is the group's own listing, the claim of successful exfiltration stands as an assertion by lockbit3 rather than an independently verified confirmation. No further official statements from the organization detailing the incident appear in the provided facts. In short, the known outline is narrow: a listing dated February 12, 2024, an attribution to lockbit3, and a description limited to internal files taken in a ransomware attack.

Who is lockbit3?

Lockbit3 is a well-documented ransomware operation that has operated for years as a ransomware-as-a-service model. Affiliates gain access to victim networks, encrypt systems, and typically steal data before encryption so they can threaten public release if payment is not made. The group maintains a leak site where it posts victim names and, in many cases, samples or full archives of stolen material. This double-extortion approach—encryption plus data theft—has been its consistent pattern across numerous sectors, including healthcare, manufacturing, and professional services.

Public reporting over time has linked lockbit3 to high-volume campaigns that pressure organizations by advertising the breach and setting deadlines for payment. The group has been the subject of international law-enforcement attention, yet variants and rebranded activity have continued to appear. In this specific case, the only claim tied directly to adioscancer.com is the listing itself and the assertion that internal files were exfiltrated; no additional statements by the group about this victim are recorded in the facts.

About adioscancer.com

Adioscancer.com serves as the web presence for the Caribbean Radiation Oncology Center, a facility focused on radiation therapy for cancer patients. Organizations of this type operate in the healthcare sector and routinely manage clinical records, treatment plans, imaging data, appointment histories, and administrative files that contain patient identifiers, contact details, insurance information, and medical histories. Staff and contractor records are also commonly held.

A breach involving such a center is consequential because the data is both sensitive and long-lived. Cancer-related medical information can reveal diagnoses, treatment progress, and personal circumstances that patients reasonably expect to remain confidential. Even limited internal files can include enough identifiers to enable further targeting or fraud. The Caribbean setting does not change the core sensitivity of oncology data; it simply situates the organization within a regional healthcare landscape where specialized radiation services are concentrated.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack. No more granular inventory—such as specific file names, record counts, or categories like patient charts versus financial documents—has been disclosed. Public detail on exact contents is therefore limited and unconfirmed.

Organizations providing radiation oncology services typically store electronic health records, referral letters, dosimetry and treatment-planning files, billing and insurance data, employee information, and operational documents. Any of these could fall under the broad description of “internal files.” Without a confirmed list, it is not possible to state which of these categories, if any, were actually taken. Readers should treat the exposure as potential rather than proven for any particular data type.

Why it matters

For individuals whose information may have been among the internal files, the primary risks are identity theft, medical fraud, and unwanted disclosure of health conditions. Stolen medical data can be used to open fraudulent insurance claims, obtain prescriptions, or craft convincing phishing messages that reference real treatment details. Because health information is difficult to change, the exposure window can last years.

For the organization itself, a ransomware incident that includes data theft can disrupt clinical operations, trigger regulatory notification duties, and erode patient trust. Even when the precise impact remains unquantified, the combination of encryption pressure and the threat of public release creates operational and reputational strain. The unknown number of people affected simply means the full human scope cannot yet be measured, not that the risk is negligible.

What to do if you're exposed

If you have been a patient, employee, or business contact of the Caribbean Radiation Oncology Center, begin by monitoring financial accounts and credit reports for unfamiliar activity. Place a fraud alert or credit freeze with the major credit bureaus if you see signs of misuse. Be alert to phishing emails or calls that reference medical appointments or billing; verify any such contact through official channels rather than replying directly. Consider requesting a copy of your medical records from the center so you know what information they hold about you.

Change passwords on any accounts that may have shared credentials or recovery emails linked to the center, and enable multi-factor authentication wherever possible. Finally, you can run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets; this provides one additional data point while you wait for any formal notifications. Stay calm, document any suspicious activity, and rely on official updates from the organization or relevant authorities rather than unverified claims circulating online.

AICompiled with AI assistance from public sources and published under our editorial standards.