Horizon Family Medical Group Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 18, 2026, the ransomware group incransom listed Horizon Family Medical Group on its site, stating that it had obtained internal data from the organization. The number of people whose information may be affected has not been disclosed. The incident involves a medical provider whose operations depend on the confidentiality of patient and administrative records. When such data appears in claims of unauthorized access, the immediate questions concern what was taken, whether it has been published, and what practical steps individuals can take.

Breaking down the breach

The only confirmed public information is the listing itself. No independent confirmation of the volume of data, the method of access, or the date of the underlying incident has been released. The scale of any exposure, including the number of individuals involved, remains unknown.

Inside incransom

Incransom is a ransomware operator that maintains a leak site where it lists organizations and sometimes describes material it claims to hold. Such groups typically gain access through compromised credentials or unpatched systems, encrypt files, and then threaten to publish stolen data if a ransom is not paid. The listing for Horizon Family Medical Group is presented by the group as evidence of a completed data theft; no separate verification of that claim has been made public.

Horizon Family Medical Group and its sector

Horizon Family Medical Group provides outpatient medical services. Organizations of this type maintain electronic health records, appointment systems, billing platforms, and internal administrative databases. These systems routinely contain identifying information about patients as well as financial and operational records required for clinical and business functions.

What data was at risk

The listing states that internal files were exfiltrated. The group claims the material includes patient records and QuickBooks financial databases totaling seven terabytes. No official statement from Horizon Family Medical Group has confirmed or refuted the specific contents or volume, so the precise categories of information involved are not independently verified.

What's at stake

Medical and financial records can be used for identity theft, insurance fraud, or targeted scams. For the organization, exposure of internal files may affect regulatory compliance obligations and ongoing patient trust. Because the number of affected individuals is unknown, the full scope of potential harm cannot yet be measured.

If your data was in this claimed breach

Monitor statements from Horizon Family Medical Group and any official notifications required under applicable privacy laws. Review credit reports and insurance explanations of benefits for unusual activity. Individuals can also run a free exposure scan of their email address against known breach data to check for prior appearances of their information in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.