Centre Medical Crowley Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Breaking down the breach

The only confirmed detail is the group’s listing itself. It asserts that files were taken from Centre Medical Crowley but supplies no date of intrusion, volume of data, or description of the encryption stage. Public records do not yet show any regulatory filing or law-enforcement bulletin that would establish the scale or timeline independently. Until additional disclosures appear, the scope of the incident remains unverified beyond the group’s statement.

Inside thegentlemen

Thegentlemen is a ransomware operation that maintains a public leak site to list organisations it claims to have targeted. Such groups commonly gain initial access through phishing, remote-desktop vulnerabilities, or compromised credentials, then move laterally to locate and copy files before deploying encryption. Their listings serve as pressure on victims to negotiate; however, the accuracy of any individual claim is not independently confirmed until the affected organisation or investigators release corroborating information.

About Centre Medical Crowley

Centre Medical Crowley operates as a private healthcare facility in Montreal, situated near the McGill University Health Centre. It provides services in family medicine, obstetrics, ophthalmology, rheumatology, and medical aesthetics. Like other outpatient clinics, it maintains electronic records that include patient identifiers, clinical notes, appointment histories, and billing information. A successful intrusion at such a site can expose data that patients and referring physicians rely on for ongoing care.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of file types, patient counts, or specific record categories has been published. Organisations of this kind routinely store names, dates of birth, health-card numbers, diagnostic summaries, prescription data, and contact details. Whether any of those categories were among the files taken has not been confirmed.

Why it matters

Medical records contain information that is difficult to change and that can be used for identity fraud, insurance scams, or targeted phishing. Even without confirmed patient counts, the presence of clinical and administrative data in the hands of an unauthorised party creates ongoing privacy and operational risks for the clinic’s patients and staff. The organisation may also face regulatory scrutiny once the incident is formally reported to Canadian privacy authorities.

What to do if you're exposed

Individuals who receive notification from the clinic or who suspect their records may be involved should place fraud alerts with credit-reporting agencies, review explanation-of-benefits statements for unfamiliar claims, and monitor bank and insurance accounts for unusual activity. Changing passwords on patient portals and enabling multi-factor authentication where available reduces the chance of further misuse. Readers can also run a free exposure scan of their email address against known breach data to check whether their information has appeared in previously published collections.

AICompiled with AI assistance from public sources and published under our editorial standards.