Anna Jaques Hospital Listed by moneymessage Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

For patients, staff and others connected to Anna Jaques Hospital, the appearance of the organisation on a ransomware leak site raises immediate questions about whether personal or clinical information has left the hospital’s control. Public reporting on 25 December 2023 indicated that the moneymessage group had listed the hospital and claimed to have taken internal files. The number of people affected remains unknown, and the precise contents of any stolen material have not been confirmed. That uncertainty itself is the practical stake: people who have received care or worked at the hospital cannot yet know whether their records are among the material the group says it holds.

What is established is limited to the listing itself and the group’s assertion of data theft. No independent confirmation of the volume, nature or subsequent release of the files has been published in the available record. For anyone whose details may be involved, the prudent course is to treat the claim seriously while recognising that many ransomware listings never result in full public dumps of every file taken.

Inside the incident

On 25 December 2023 Anna Jaques Hospital was reported as listed on the moneymessage ransomware leak site. According to the group’s own claim, internal files had been exfiltrated during a ransomware attack. No further technical detail—such as the date of initial access, the method of entry, the encryption status of systems, or the volume of data removed—has been disclosed in the public summary. The number of individuals whose information may have been included is listed as unknown. The incident is therefore known only through the leak-site posting and the accompanying assertion that internal data was stolen. Whether the hospital’s systems were encrypted, whether a ransom demand was made, or whether any data has since been published remains unconfirmed in the available facts.

Who is moneymessage?

Moneymessage is a ransomware operation that became active in 2023 and follows the now-common double-extortion model: encrypting victim systems while simultaneously copying data and threatening to release it if payment is not made. Like other groups of this type, it maintains a public leak site on which it posts the names of organisations it claims to have compromised, often accompanied by sample files or countdown timers. Public reporting on the group has described attacks against a range of sectors, including healthcare, manufacturing and professional services, typically using phishing, compromised credentials or exploitation of remote-access tools as initial vectors. The group’s listings are claims; they do not by themselves prove that every asserted file set was in fact taken or that the victim organisation has verified the intrusion. In the present case the only statement attributed to moneymessage is that it stole internal data from Anna Jaques Hospital.

About Anna Jaques Hospital

Anna Jaques Hospital is a community hospital serving the Newburyport area of Massachusetts and surrounding communities. As a healthcare provider it routinely holds large volumes of sensitive information: patient medical histories, diagnostic results, insurance and billing records, employee personnel files, and operational documents. Hospitals of this kind are attractive targets for ransomware groups precisely because the data they store is both valuable on criminal markets and essential to ongoing care; disruption or exposure can affect clinical operations and patient privacy simultaneously. The listing of Anna Jaques Hospital therefore carries consequences that extend beyond the organisation itself to the patients and staff whose information may have been among the internal files claimed by the attackers.

What data was at risk

The only description provided is that internal files were allegedly exfiltrated. No inventory of specific data types—such as electronic health records, Social Security numbers, financial details or employee credentials—has been published. Organisations in the hospital sector typically maintain patient identifiers, clinical notes, laboratory results, insurance information, and staff records. Whether any of those categories were present in the material the group claims to hold is unconfirmed. Public detail on the exact contents remains limited; readers should not assume that particular categories of data were or were not taken solely on the basis of the leak-site listing.

Why it matters

If internal hospital files containing personal or clinical information were in fact removed, the people named in those files face concrete risks: identity theft, medical identity fraud, targeted phishing that references real appointments or diagnoses, and long-term exposure of sensitive health details. For the hospital itself, the incident raises operational, regulatory and reputational concerns—notification obligations under health-privacy rules, potential disruption of care if systems were encrypted, and the need to verify the integrity of remaining records. Because the scale of any compromise is unknown, both individuals and the organisation must operate under incomplete information, which itself prolongs uncertainty and the period during which protective steps remain necessary.

What to do if you're exposed

Anyone who has been a patient, employee or contractor of Anna Jaques Hospital should monitor financial and medical statements for unfamiliar activity, place free fraud alerts with the major credit bureaus if identity documents may have been involved, and be alert to phishing messages that appear to reference hospital services. Changing passwords on accounts that reuse credentials associated with hospital portals is a sensible precaution. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. If the hospital issues official notifications or guidance, those communications should be followed carefully; until then, the steps above remain the most practical first measures available to individuals.

AICompiled with AI assistance from public sources and published under our editorial standards.