GI Medical Services Listed by losttrust Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

GI Medical Services, a small gastroenterology practice based in Staten Island, New York, was listed by the losttrust ransomware group in a report dated September 26, 2023. Public details indicate that internal files were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further specifics about the intrusion have not been disclosed.

The listing places the incident in the category of claimed double-extortion activity common to this actor. For patients and staff connected to a healthcare provider that handles sensitive clinical and administrative information, even limited confirmation of data theft raises practical questions about exposure and next steps.

Inside the incident

According to the available record, GI Medical Services appeared on a losttrust leak-site listing reported on September 26, 2023. The sole concrete description of what occurred is that internal files were allegedly exfiltrated in a ransomware attack. No public figure has been given for the volume of data taken, the exact date the intrusion began or was discovered, the initial access method, or whether systems were also encrypted. The number of individuals whose information may be involved is listed as unknown.

Because the primary source is the threat actor’s own claim, the listing itself should be treated as an unverified assertion until corroborated by the organization or independent reporting. No additional technical indicators, ransom demands, or confirmation of data publication have been supplied in the facts available for this account.

Inside losttrust

losttrust is a ransomware operation that became visible in 2023 and follows the now-standard double-extortion model used by many contemporary groups. Operators typically gain access to a victim network, exfiltrate data, deploy encryption, and then threaten to publish or sell the stolen material on a dedicated leak site if payment is not made. Listings on such sites serve both as pressure on the victim and as advertising of the group’s activity.

Public reporting on losttrust has described it as targeting organizations across multiple sectors, often smaller entities that may have fewer dedicated security resources. The group’s claims about any specific victim, including the assertion that internal files from GI Medical Services were taken, remain just that—claims—unless independently verified. No statements attributed to losttrust beyond the fact of the listing are part of the record for this incident.

About GI Medical Services

GI Medical Services is described as Staten Island’s premiere provider of expert gastroenterology services. It operates in the hospital and health-care industry, employs between one and five people, reports revenue in the $0 million to $1 million range, and is headquartered in Staten Island. As a specialized medical practice, its day-to-day work involves patient consultations, diagnostic procedures, treatment planning, and the associated administrative and clinical record-keeping.

Organizations of this type routinely hold protected health information, contact details, insurance data, and internal operational files. A breach affecting even a small practice can therefore touch both the privacy of patients and the continuity of care the practice provides. The limited size of the staff does not reduce the sensitivity of the data typically present in such an environment.

What was likely exposed

The facts state only that internal files were exfiltrated. No inventory of file types, patient records, financial documents, or employee data has been publicly itemized, and the exact contents remain unconfirmed.

In general, a gastroenterology practice would be expected to maintain electronic health records containing names, dates of birth, medical histories, procedure notes, lab results, insurance identifiers, and billing information, along with staff records and internal correspondence. Whether any of those categories were among the files taken in this incident is not established by the available information. Readers should treat specific data-element claims as unconfirmed until official notification or further reporting appears.

The real-world impact

For individuals whose information may have been involved, the primary risks are the misuse of personal and health-related data—identity theft, targeted phishing that references medical details, or fraudulent insurance activity. Because the scale of the exposure is unknown, it is not possible to quantify how many people face these risks or how sensitive the material actually is.

For the practice itself, a ransomware incident that includes data theft can disrupt operations, trigger regulatory notification duties under health-privacy rules, and require forensic and recovery work that strains a small organization. Reputation and patient trust may also be affected, independent of any financial loss. None of these outcomes has been confirmed in public detail for this case; they represent the ordinary consequences observed when similar healthcare entities experience comparable claims.

Were you affected?

If you are a current or former patient or employee of GI Medical Services, monitor official communications from the practice for any breach notification. Review bank and insurance statements for unfamiliar activity, enable multi-factor authentication on email and medical-portal accounts, and be alert to phishing messages that reference gastroenterology care or Staten Island providers. Consider placing a fraud alert with the major credit bureaus if you believe sensitive identifiers may have been exposed.

You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets. That step does not confirm involvement in this specific incident, but it can surface other exposures that warrant attention while official details remain limited.

AICompiled with AI assistance from public sources and published under our editorial standards.