Doctors Center Hospital Listed by projectrelic Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have received care at Doctors Center Hospital, or who work there, face a practical concern: a ransomware group has publicly listed the hospital as a victim and claims to have taken internal files. When a healthcare provider appears on such a list, the immediate question is whether personal, medical, or administrative information could be misused—and what anyone affected can reasonably do next. Public detail remains limited, so the scale and exact contents of any exposure are not confirmed.

On December 18, 2022, Doctors Center Hospital was reported as listed by the projectrelic ransomware group. The listing asserts that internal files were exfiltrated in a ransomware attack. No confirmed figure for people affected has been published, and independent verification of the group’s claims is not part of the available record.

Breaking down the breach

According to the reported information, Doctors Center Hospital appeared on a projectrelic leak-site listing dated around December 18, 2022. The group claims that internal files were exfiltrated as part of a ransomware attack. The number of people affected is unknown. The precise method of initial access, the duration of any intrusion, whether systems were encrypted, and whether a ransom was demanded or paid are all undisclosed in the available facts. What is stated is the claim of exfiltration of internal files and the hospital’s appearance on the group’s listing. Until the organisation or independent investigators publish further confirmed detail, the incident should be treated as an asserted listing rather than a fully documented forensic account.

Who is projectrelic?

Projectrelic is a ransomware operation known in public reporting for double-extortion style activity: encrypting or disrupting systems while also claiming to steal data and threatening to publish it if demands are not met. Like other groups in this category, it has used dedicated leak sites to name organisations and, in some cases, to release samples or larger sets of files. Tactics commonly associated with such actors include phishing, exploitation of remote-access weaknesses, and lateral movement inside networks before data theft and encryption. These patterns are drawn from broader public documentation of the group’s activity and should not be read as confirmed steps in this specific case. Regarding Doctors Center Hospital, the only claim tied directly to the incident is the leak-site listing itself and the assertion that internal files were exfiltrated; no further statements attributed to the group about this victim appear in the provided facts.

About Doctors Center Hospital

Doctors Center Hospital is described in the reported summary as among the leaders in the hospital network of Puerto Rico. Hospitals of this kind deliver inpatient and outpatient care, manage clinical records, billing, insurance coordination, and staff and vendor information. They routinely hold sensitive personal and health-related data because that information is required to treat patients, schedule care, and operate under healthcare regulations. A breach or claimed data theft at such an organisation is consequential precisely because the data involved can be both intimate and long-lived: medical histories, identifiers, and contact details do not expire the way a single password might. Even when the exact scope of an incident is unconfirmed, the sector’s data holdings mean that listings by ransomware groups raise legitimate concern for patients, employees, and partners.

What was likely exposed

The facts name the exposed material only as “internal files exfiltrated in ransomware attack.” No inventory of specific data types—such as medical records, Social Security numbers, financial details, or employee files—has been disclosed in the available record. Organisations in the hospital sector typically maintain electronic health records, patient demographics, insurance and billing data, appointment and referral information, and internal administrative or workforce files. It is reasonable to note that those categories are common in healthcare environments, yet it would be inaccurate to state that any particular category was confirmed stolen in this incident. The exact contents remain unconfirmed; the public claim is limited to internal files taken during a ransomware attack.

What's at stake

For individuals, the main risks are identity misuse, targeted phishing that references real medical or personal details, and long-term uncertainty about whether sensitive health information could surface. Stolen healthcare data can be used to open accounts, file false claims, or craft convincing scams. Because medical information is difficult to change, the exposure window can last years. For the hospital, stakes include operational disruption if systems were affected, regulatory and notification obligations, reputational harm, and the cost of investigation and remediation. None of these outcomes is established as fact solely by a leak-site listing; they are the concrete possibilities that follow when internal hospital files are claimed to have been taken. The absence of a published count of affected people does not remove the need for caution among those who have a relationship with the facility.

What to do if you're exposed

If you are a patient, employee, or other individual connected to Doctors Center Hospital, treat the listing as a reason to heighten ordinary vigilance rather than as proof that your own record was taken. Monitor financial and insurance statements for unfamiliar activity, be sceptical of unexpected calls or messages that cite hospital details, and consider placing fraud alerts or credit freezes if you have reason to believe identifiers were involved. Keep records of any official notices the hospital may issue. You can also run a free exposure scan of your email address to check whether your information has already appeared in known breach datasets, which can help you prioritise further steps such as password changes and multi-factor authentication on important accounts.

AICompiled with AI assistance from public sources and published under our editorial standards.