LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › iGlobal Services, Medenet Listed by akira Ransomware Group

HIGH severity claimedUnverified claimHow we verify

iGlobal Services, Medenet Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·January 29, 2026
iGlobal Services, Medenet Listed by akira Ransomware Group

Reported January 29, 2026.

HIGH
Severity
January 29, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

iGlobal Services and Medenet were listed by the Akira ransomware group on January 29, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of individuals may have been affected; anyone connected to either organization should review their accounts and security notices for further guidance.

Severity & verification
HIGH severity claimedUnverified claim
Exposes government-ID data.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

On January 29, 2026, the Akira ransomware group listed iGlobal Services, Medenet on its leak site and stated it had exfiltrated internal files. The number of individuals affected remains unknown, and no independent confirmation of the data volume or contents has been made public. The listing draws attention to persistent targeting of organizations that manage healthcare records and cybersecurity services.

What happened

The incident was reported on January 29, 2026, when the Akira group posted the organization on its leak site. The group stated that internal files had been exfiltrated during a ransomware attack and indicated plans to upload 24 GB of data. No further details on the timing of the intrusion, the method of initial access, or the encryption of systems have been disclosed.

The group behind it: akira

Akira is a ransomware operation that has conducted multiple campaigns since 2023, typically employing double-extortion tactics that combine file encryption with the threat of data publication. The group has targeted organizations across sectors and maintains a leak site where it lists victims and, in some cases, posts samples of claimed data. Its listing of iGlobal Services, Medenet constitutes an unverified claim by the group; no independent verification of the asserted data volume or specific file contents has been reported.

About iGlobal Services, Medenet

iGlobal Services, Medenet operates in the healthcare technology and risk-management space. Medenet supplies electronic health record solutions, practice management tools, credentialing, and coding services to physician practices. iGlobal Services focuses on cybersecurity risk management for regulated environments. Organizations in these fields routinely process patient records, employee information, and contractual materials subject to regulatory requirements.

What was likely exposed

The only confirmed detail is that internal files were allegedly exfiltrated. The Akira group claims the material includes detailed employee and customer data such as driver’s licenses, passports, and Social Security numbers, along with contracts, financial records, confidential files, and nondisclosure agreements. The exact contents, volume, and sensitivity of any released material remain unconfirmed.

What's at stake

Individuals whose records may be involved face potential misuse of personal identifiers for identity-related fraud or unauthorized account access. The organization may encounter regulatory scrutiny and operational disruption while addressing the incident. Because the precise scope of exposed data is not yet known, the full extent of downstream effects cannot be assessed at this time.

Were you affected?

Begin by monitoring official statements from iGlobal Services, Medenet for any notifications or guidance. Review account statements and credit reports for unusual activity. Individuals may also run a free exposure scan of their email address against known breach data sets to determine whether their information appears in publicly referenced incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyiGlobal Services, Medenet security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See iGlobal Services, Medenet’s full breach history →

More recent breaches

Allele Diagnostics Listed by akira Ransomware GroupMay 13, 2026Greenwoods Dental Centre Listed by akira Ransomware GroupMay 8, 2026Clinical Registry Solutions Listed by akira Ransomware GroupMay 6, 2026Salimetrics Listed by akira Ransomware GroupApril 21, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the iGlobal Services, Medenet Listed by akira Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by akira — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram