Amber Court 2020 was hacking A lot of customers' personal information was stolen Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target organisations that hold sensitive personal records, using data theft and public leak-site pressure as leverage. Senior-care providers sit in a particularly exposed part of that landscape because the information they manage is both intimate and long-lived. Against that backdrop, a listing that appeared in mid-2023 drew attention to Amber Court, a residential senior-care operator in New Jersey.

Public reporting dated 12 July 2023 states that the Alphv ransomware group listed Amber Court and claimed that internal files had been exfiltrated. The number of people affected remains unknown, and independent confirmation of the full scope has not been published. What is known is limited; what follows sets out those facts and the practical implications for anyone connected to the organisation.

Inside the incident

According to the available record, Alphv listed Amber Court on its leak site and asserted that a ransomware attack had resulted in the theft of internal files. The headline associated with the listing also stated that a large volume of customers’ personal information had been stolen. The incident was reported on 12 July 2023. No public figure has been given for the number of individuals affected, and details of the initial access method, the duration of any intrusion, or the precise timeline of exfiltration have not been disclosed.

The record characterises the event as a ransomware attack involving data exfiltration. Beyond the group’s claim and the high-level description of “internal files,” further technical or forensic particulars remain unconfirmed in open sources.

Inside alphv

Alphv, also widely known as BlackCat, is a ransomware operation that emerged in late 2021 and has operated on a ransomware-as-a-service model. Affiliates typically gain access to victim networks, move laterally, exfiltrate data, and deploy encryption, after which the group pressures the organisation by threatening to publish stolen material on a dedicated leak site. The group has been linked to numerous attacks across healthcare, manufacturing, government contractors and professional services. It has used double-extortion tactics—combining encryption with the threat of data release—as a core part of its approach.

In this case, the listing of Amber Court constitutes a claim by the group. Public reporting does not independently verify every assertion made on the leak site, and no additional statements attributed specifically to Alphv about this victim beyond the listing itself appear in the available facts.

Amber Court and its sector

Amber Court is a residential senior-care community based in Elizabeth, New Jersey. Public material associated with the organisation describes operations dating to 1968 under the guidance of Alfred and Judith Schonberger, emphasising long-term residential care and a holistic approach to residents’ physical, mental and emotional well-being. Its headquarters address is listed as 1155 E Jersey St, Elizabeth, New Jersey 07201.

Organisations in the senior-living and long-term care sector routinely manage extensive personal, financial and health-related records for residents and their families. A breach affecting such an entity is consequential because the population served is often older, may have complex medical needs, and may be less able to monitor or remediate identity-related harm quickly. Even when the exact contents of stolen files are unconfirmed, the sector’s typical data holdings make any credible exfiltration claim a matter of legitimate concern for residents, families and staff.

The information in question

The facts state that internal files were exfiltrated in a ransomware attack. No itemised inventory of data types—such as specific categories of personal identifiers, medical records, financial details or staff information—has been publicly confirmed. The associated headline claimed that a large amount of customers’ personal information was stolen, but that remains part of the group’s assertion rather than an independently verified catalogue.

Senior-care operators commonly hold names, dates of birth, contact details, emergency contacts, insurance and billing information, medical histories, medication lists, and sometimes Social Security numbers or other government identifiers. Because the precise contents of the files allegedly taken from Amber Court have not been disclosed, it is not possible to state which of these categories, if any, were included. Readers should treat the exposure as involving internal organisational files whose exact composition is unconfirmed.

What's at stake

For individuals whose data may have been involved, the practical risks are those that follow any compromise of personal or health-related records: potential misuse of identity information, targeted phishing or social-engineering attempts that reference genuine personal details, and longer-term exposure of sensitive medical or financial circumstances. Older adults and their families may face particular difficulty detecting fraudulent activity or restoring credit and benefits if identifiers are abused.

For the organisation, the stakes include operational disruption from the ransomware event itself, regulatory and notification obligations that may apply under health-privacy and state breach laws, reputational harm, and the cost of investigation and remediation. Because the scale of affected individuals is unknown, the full extent of these consequences cannot yet be quantified from public information.

• Unknown number of people potentially affected
• Unconfirmed exact data types beyond “internal files”
• Claimed exfiltration by a ransomware group known for double extortion
• Heightened sensitivity because the organisation serves seniors in residential care

Were you affected?

If you or a family member have been a resident, client or employee of Amber Court, treat the possibility of exposure seriously even though Reported Details are limited. Monitor financial and insurance statements for unfamiliar activity, be cautious of unsolicited calls or messages that reference personal or medical details, and consider placing fraud alerts or credit freezes if you believe sensitive identifiers may have been involved. You may also wish to request any official breach notification the organisation is required to issue.

As a practical additional step, readers can run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Doing so does not confirm or rule out involvement in this specific incident, but it can help identify other exposures that warrant attention.

AICompiled with AI assistance from public sources and published under our editorial standards.