Gramercy Surgery Center Listed by everest Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have received care at Gramercy Surgery Center, or who work there, face the practical risk that personal or medical information may now sit outside the organisation’s control. On 15 July 2024 the ransomware group everest publicly listed the centre, claiming it had taken 465 GB of internal files and giving the organisation a short window to re-enter negotiations. The number of individuals affected remains unknown, so anyone connected to the facility has reason to treat the claim seriously and to watch for unusual activity involving their identity or health records.

Public detail is limited to the group’s own leak-site posting. No independent confirmation of the intrusion or of the precise contents of the files has been released. Still, the mere assertion that a large volume of internal material has left the network is enough to create real-world consequences for patients and staff.

Breaking down the breach

According to the listing published by everest on 15 July 2024, Gramercy Surgery Center was the target of a ransomware attack in which internal files were exfiltrated. The group stated that the total volume of stolen data amounted to 465 GB and that the organisation had “the last 24 hours to return to the chat.” No further technical details—such as the initial access method, the date the intrusion began, or whether systems were encrypted—have been disclosed in the available record. The number of people whose information may be contained in those files is listed as unknown. The only concrete figures supplied by the actors themselves are the claimed data volume and the short deadline for renewed contact.

Because the information originates solely from the threat actors’ leak site, it must be treated as an unverified claim until the organisation or independent investigators provide corroboration. At present, public sources contain no statement from Gramercy Surgery Center confirming or denying the incident.

Who is everest?

Everest is a ransomware group that has operated since at least 2020 and is known for double-extortion tactics: encrypting systems while simultaneously stealing data and threatening to publish it if a ransom is not paid. The group maintains a dark-web leak site where it posts victim names, sample files, and countdown timers. Public reporting has linked everest to attacks across multiple sectors, including healthcare, manufacturing and professional services. Its operators typically demand payment in cryptocurrency and, when negotiations stall, release portions of the stolen data to pressure the victim. The listing of Gramercy Surgery Center follows this established pattern; the group claims the centre is a victim and asserts that 465 GB of material has already been removed. No additional statements attributed specifically to this incident beyond the leak-site text have been made public.

Who is Gramercy Surgery Center?

Gramercy Surgery Center is an ambulatory surgical facility that provides outpatient procedures. Organisations of this type routinely collect and store patient demographics, insurance details, medical histories, procedure notes, billing records and employee information. Because the centre’s website is listed in the everest posting, the claim is directed at the entity operating under that name. A breach at any surgical centre is consequential precisely because the data it holds is both sensitive and regulated: medical information can be used for identity theft, insurance fraud or targeted social-engineering attacks, and the organisation itself faces potential regulatory scrutiny, notification obligations and reputational harm.

What was likely exposed

The only data type named in the available record is “internal files” said to have been exfiltrated in a ransomware attack, with a claimed volume of 465 GB. No inventory of specific file categories—patient records, employee data, financial documents or otherwise—has been published. Surgery centres typically maintain electronic health records, scheduling systems, billing databases and administrative correspondence. Whether any of those categories are among the files everest claims to hold remains unconfirmed. Until a formal disclosure or forensic report appears, the exact contents of the 465 GB must be regarded as unknown.

Why it matters

For individuals, the practical risks include fraudulent use of personal identifiers, attempts to obtain medical services or prescriptions under another person’s name, and phishing campaigns that reference genuine appointment or insurance details. Even if clinical notes are not present, administrative data alone can enable account takeovers or secondary fraud. For the organisation, the incident—if confirmed—raises questions of operational disruption, possible regulatory reporting under health-privacy rules, and the cost of investigation and remediation. Because the number of affected people is unknown, the scale of any required notification or credit-monitoring programme cannot yet be estimated. The short deadline everest publicly announced also illustrates the pressure such groups apply to force rapid decisions under incomplete information.

Were you affected?

If you have been a patient, employee or contractor of Gramercy Surgery Center, treat the claim as a prompt for caution rather than confirmed compromise. Monitor bank and insurance statements for unexpected activity, enable multi-factor authentication on email and patient-portal accounts, and be sceptical of unsolicited messages that reference medical appointments or billing. Consider placing a fraud alert with the major credit bureaus. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets; such a scan does not prove or disprove involvement in this specific incident, but it can reveal whether credentials or personal details are circulating more widely. Official notification, if required, will come from the organisation itself once the facts are established.

AICompiled with AI assistance from public sources and published under our editorial standards.