Advanced Healthcare Professionals Listed by insomnia Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target healthcare and home-care providers, exploiting the sector’s reliance on sensitive personal records and the operational pressure that can follow any disruption. Against that backdrop, Advanced Healthcare Professionals was listed by the insomnia ransomware group on 6 November 2025. The listing asserts that internal files were taken during a ransomware attack; the number of people affected remains unknown and public detail on the method and full scope is limited. For clients, caregivers and staff who entrust such organisations with private information, even an unverified claim of this kind raises concrete questions about exposure and next steps.

Inside the incident

Public reporting states that Advanced Healthcare Professionals was listed by the insomnia ransomware group on 6 November 2025. According to the available summary, the group claims internal files were exfiltrated in a ransomware attack. No confirmed figure for the number of people affected has been released, and details of the initial access method, the duration of any intrusion, or whether systems were encrypted remain undisclosed. The organisation itself has not, in the material provided, issued a public confirmation or denial of the listing. As with many such claims, the leak-site entry stands as an assertion by the group rather than independently verified fact at the time of reporting.

Inside insomnia

Insomnia is a ransomware group known for double-extortion tactics: encrypting victim systems while also stealing data and threatening to publish it if a ransom is not paid. Like other actors in this space, the group typically posts victim names and sample files on a dedicated leak site to increase pressure. Public reporting on prior campaigns has shown the group targeting a range of sectors, often focusing on organisations that hold operationally critical or personally sensitive records. Claims made on such sites are self-serving and should be treated as unverified until corroborated by the victim organisation, law-enforcement statements or independent forensic analysis. In this case, the listing of Advanced Healthcare Professionals is presented solely as the group’s claim that internal files were taken.

About Advanced Healthcare Professionals

Advanced Healthcare Professionals provides personal care attendants who work in clients’ homes, apartments and assisted-living settings. The organisation states that it has more than ten years of experience serving hundreds of clients and matches qualified caregivers to individual schedules, including 24-hour and holiday coverage. Home-care providers of this type routinely handle scheduling, medical-support notes, contact details and other records needed to coordinate safe, continuous care. Because the service involves vulnerable adults and their families, any compromise of internal systems can affect both the continuity of care and the privacy of those receiving it. The sector as a whole has become a frequent target for ransomware precisely because of the sensitivity of the data held and the operational urgency that can follow an outage.

What data was at risk

The only data type named in the available facts is “internal files” said to have been exfiltrated. No further breakdown—such as whether client medical notes, caregiver credentials, financial records or employee data were included—has been disclosed, and the number of individuals potentially affected is listed as unknown. Organisations that arrange in-home care typically maintain names, addresses, telephone numbers, emergency contacts, care plans, medication lists and billing information, as well as personnel files for caregivers. Whether any of those categories were present among the files claimed by insomnia remains unconfirmed. Until the organisation or investigators release a more precise inventory, the exact contents of the alleged exfiltration cannot be stated as fact.

Why it matters

If internal files were indeed taken, the practical risks for clients and staff include identity theft, fraudulent use of personal or medical details, and targeted social-engineering attempts that reference genuine care arrangements. Caregivers whose credentials or contact information appear in stolen material may face account takeovers or phishing. For the organisation, the consequences can include regulatory notification duties, potential civil claims, and the operational cost of restoring systems and verifying the integrity of remaining records. Even when a listing is only a claim, the mere assertion can erode trust among families who rely on the service for daily support. Because the scale of any exposure is still unknown, individuals connected to Advanced Healthcare Professionals have legitimate reason to monitor for unusual activity while awaiting clearer information.

Were you affected?

If you are a current or former client, family member or caregiver associated with Advanced Healthcare Professionals, treat the listing as a prompt for caution rather than confirmed personal compromise. Review bank and credit-card statements for unfamiliar charges, enable multi-factor authentication on email and any care-related portals, and be sceptical of unsolicited calls or messages that reference your care arrangements. Consider placing a fraud alert with the major credit bureaux if you believe sensitive identifiers may have been involved. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets; such a scan will not confirm or rule out involvement in this specific incident, but it can surface other exposures that warrant attention. Continue to watch for any official notice from the organisation itself, which remains the most reliable source of confirmation and guidance.

AICompiled with AI assistance from public sources and published under our editorial standards.