LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › Clínica Dávila Listed by devman Ransomware Group

HIGH severity claimedUnverified claimHow we verify

Clínica Dávila Listed by devman Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·December 18, 2025
Clínica Dávila Listed by devman Ransomware Group

Reported December 18, 2025.

HIGH
Severity
December 18, 2025
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

Clínica Dávila was listed today, December 18, 2025, by the devman ransomware group, which claims to have exfiltrated internal files from the organization. Individuals who have been patients or staff members are advised to check for updates from Clínica Dávila and to monitor their personal information.

Severity & verification
HIGH severity claimedUnverified claim
Exposes government-ID data.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Individuals whose personal medical information is held by healthcare providers such as Clínica Dávila face the possibility that sensitive records could circulate beyond intended channels after a ransomware group listed the organisation. The scale of any exposure remains unknown, leaving those potentially affected without clear information on whether their details were involved.

What happened

On December 18, 2025, Clínica Dávila was listed by the devman ransomware group. The number of people affected is not known. Public detail on the method of entry, the volume of data taken, or any ransom demands is undisclosed. The available facts state that internal files were exfiltrated in a ransomware attack.

The group behind it: devman

The listing on the group’s site constitutes a claim by devman that it carried out the operation. Public records show devman as a ransomware actor that targets organisations and publishes victim names on its leak site when negotiations fail or as part of its operations. No independent confirmation of the specific claims regarding Clínica Dávila has been provided in the available facts.

Who is Clínica Dávila?

Clínica Dávila operates as a healthcare provider. Organisations in this sector routinely collect and store patient records, identification details, and clinical test results to deliver medical care. A breach at such a facility is consequential because the data involved is often personal and difficult to change once exposed.

What data was at risk

The facts list internal files as having been exfiltrated. A reported summary references patients’ full records, HIV test results, and IDs. The precise contents of any exfiltrated material have not been confirmed publicly, so the exact data types remain unverified beyond the general description of internal files.

The real-world impact

People whose information may have been taken could encounter risks such as unwanted disclosure of health status or identity details. The organisation faces operational and reputational consequences from the listing. Available reporting notes a prolonged period without visible response from the clinic despite multiple contact attempts by investigators, particularly concerning the sensitivity of referenced test results.

If your data was in this claimed breach

Monitor official statements from Clínica Dávila for any notifications or remediation steps. Consider placing fraud alerts with credit agencies and reviewing accounts for unusual activity. Readers can run a free exposure scan of their email address to check whether their information appears in known breach data.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyClínica Dávila security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See Clínica Dávila’s full breach history →

More recent breaches

d*v***.cl Listed by devman Ransomware GroupDecember 18, 2025oppor**nity*****.org Listed by devman Ransomware GroupDecember 27, 2025Hopital La Rabta Listed by qilin Ransomware GroupDecember 11, 2025Hopital ** ***** Listed by devman Ransomware GroupDecember 11, 2025

Latest breaches

Read GalaxyWarden’s full analysis of the Clínica Dávila Listed by devman Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by devman — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram