American Journal of Managed Care Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional and media organizations that hold operational and subscriber data, using leak-site listings to pressure victims after claimed data theft. In this landscape, the appearance of a specialized healthcare-policy journal on a known ransomware group's site is a reminder that even smaller, niche publishers can become targets.

On October 14, 2025, the American Journal of Managed Care was listed by the qilin ransomware group. Public reporting indicates the group claims internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and further technical details of the incident have not been disclosed.

Inside the incident

According to available reporting, the American Journal of Managed Care appeared on the qilin ransomware group's leak site on or around October 14, 2025. The listing asserts that internal files were taken during a ransomware attack. No public confirmation of the full scope, the exact date of intrusion, the initial access method, or any ransom demand has been released. The number of individuals whose information may have been involved is listed as unknown. Beyond the claim of internal-file exfiltration, specific file counts, systems affected, or timelines remain undisclosed.

The group behind it: qilin

qilin is a ransomware operation that has been active for several years and is widely documented as operating a ransomware-as-a-service model. Like many such groups, it typically combines encryption of victim systems with data theft, then threatens to publish stolen material on a dedicated leak site if payment is not made. Public reporting on qilin has associated the group with attacks across multiple sectors, including healthcare-adjacent and professional services organizations. The group’s leak-site listings are claims of compromise and data theft; they are not independent verification that every asserted detail is accurate. In this case, the listing of the American Journal of Managed Care should be treated as the group’s assertion that internal files were exfiltrated, rather than as confirmed forensic findings.

About American Journal of Managed Care

The American Journal of Managed Care is a multimedia, peer-reviewed, Medline-indexed journal founded in 1995. It focuses on managed-care policy, healthcare delivery, and related industry developments, aiming to keep industry leaders informed on policy and practice. The organization is headquartered in Cranbury, New Jersey. As a specialized publisher serving healthcare and policy audiences, it typically maintains editorial systems, contributor and subscriber records, and internal business files. A breach involving such an organization is consequential because it can expose operational material, professional contacts, and any personal or business data held in the course of publishing and industry outreach, even when the primary product is journal content rather than direct patient care.

What was likely exposed

Public facts state only that internal files were claimed to have been exfiltrated in a ransomware attack. Exact data types beyond that description have not been disclosed, and the number of people affected is unknown. Organizations of this kind commonly hold editorial manuscripts, staff and contractor records, subscriber or reader contact lists, advertising and partnership materials, and routine business documents. Whether any of those categories—or more sensitive personal data—were among the files the group claims to have taken remains unconfirmed. Readers should treat the precise contents of any stolen data as unconfirmed until the organization or independent investigators provide further detail.

The real-world impact

For individuals whose information may have been present in internal files, risks can include phishing or social-engineering attempts that reference professional affiliations, journal subscriptions, or industry contacts. Exposed business or contact data can also be used for targeted fraud. For the organization, a claimed ransomware incident can disrupt operations, damage trust among contributors and readers, and create ongoing costs related to investigation, notification, and remediation. Because the scale of any personal-data exposure is unknown, the practical impact on any given person cannot yet be quantified from public information alone. The listing itself may also increase secondary risk if criminals outside the original group attempt to exploit the publicity.

Were you affected?

If you have a professional or subscriber relationship with the American Journal of Managed Care, monitor accounts and communications for unusual activity and treat unsolicited messages that reference the journal or healthcare policy with caution. Consider placing fraud alerts with credit bureaus if you believe personal identifiers may have been involved, and change passwords on any accounts that reused credentials associated with the organization. You can also run a free exposure scan of your email address to check whether your information has already appeared in known breach data sets. Official updates, if any, should come from the organization itself; treat third-party claims with appropriate skepticism until verified.

AICompiled with AI assistance from public sources and published under our editorial standards.