Centre Ellipse Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People whose personal or medical information is held by specialised care providers can face lasting privacy and security consequences when that data is taken during a ransomware incident. On 9 June 2026 the Akira ransomware group listed Centre Ellipse on its leak site and stated that it had exfiltrated internal files from the Strasbourg facility. The number of individuals affected remains unknown, and the organisation has not issued a public statement confirming or detailing the event.

Breaking down the breach

The incident was first noted through the group’s leak-site posting on 9 June 2026. The listing asserts that 142 GB of corporate data will be uploaded and refers to health information for at least 500 patients, employee personal information, financial records, contracts and confidential agreements. No independent confirmation of the volume, contents or timing of any data release has been made public. The method of initial access and the duration of any unauthorised presence inside the network are not disclosed.

Inside akira

Akira is a ransomware group that has conducted operations against organisations in multiple countries since at least 2023. Public reporting describes the group as using double-extortion tactics: encrypting systems and also copying data before demanding payment. The group maintains a leak site where it lists victims and, in some cases, publishes samples or full archives when negotiations fail. Its targeting has included healthcare, manufacturing and professional-services entities, though each incident’s specifics vary.

Who is Centre Ellipse?

Centre Ellipse operates as an ambulatory medical facility in Strasbourg. It provides personalised care pathways for patients with chronic diseases or syndromes, with a multidisciplinary team offering physical and psychological support, including cardiac rehabilitation and mental-health services. Facilities of this type routinely collect and store detailed clinical records, appointment histories, insurance details and staff administrative data.

What was likely exposed

The Akira listing claims the exfiltration of internal files that include health information for at least 500 patients, employee personal information, financial records, contracts and confidential agreements. The only confirmed detail from the public record is that internal files were removed during a ransomware attack. The precise categories, volume and sensitivity of any data that may ultimately be published remain unconfirmed.

Why it matters

Health-related information can be used for targeted fraud, insurance scams or unwanted disclosure of sensitive medical conditions. Employee records and contractual documents may contain identifiers that facilitate account takeover or social-engineering attacks. For the organisation, the incident adds operational disruption, regulatory scrutiny and potential loss of patient trust, regardless of whether ransom demands are met.

Were you affected?

Individuals who have received care or worked at Centre Ellipse can contact the facility directly to ask about notification procedures and any recommended protective steps. Monitoring bank and insurance accounts for unusual activity, changing passwords on associated portals and enabling multi-factor authentication are standard precautions. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.