International Maritime Hospita Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 14, 2026, the ransomware group thegentlemen listed International Maritime Hospita on its leak site and stated that internal files had been taken during a ransomware attack. The number of people whose records may be involved is not known, and no further details on the volume or contents of the material have been released. For patients, staff and others connected to the facility, the listing raises the possibility that personal or operational information held by a government-affiliated hospital could now circulate outside authorised channels.

Inside the incident

The only confirmed public information is the April 14, 2026 listing and the claim that internal files were exfiltrated. No date for the underlying intrusion, no count of records, and no description of the encryption or data-handling steps have been disclosed. The organisation has not issued a separate statement confirming or contesting the listing.

Inside thegentlemen

Thegentlemen is a ransomware operator that maintains a leak site to publish material taken from targeted organisations. Such groups commonly gain initial access through remote services, exploit unpatched systems or use stolen credentials, then move laterally to locate and copy data before deploying encryption. Public records show the group has listed entities in multiple countries and sectors; each listing is presented by the group as evidence of a successful operation, though independent verification of the claims varies.

Who is International Maritime Hospita?

International Maritime Hospita operates as a government-affiliated healthcare facility in Tema, Ghana. It provides maritime and general medical services around the clock, including operating theatres, maternity care, emergency treatment and supporting infrastructure such as an oxygen plant and morgue. The hospital participates in international medical tourism activities and is described in public directories as one of the higher-ranked facilities in the country. Organisations of this type routinely process patient identifiers, clinical records, insurance details and administrative correspondence.

What was likely exposed

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of file types or data categories has been published. Hospitals in this sector typically hold patient names, dates of birth, contact information, medical histories, test results and billing records, as well as staff employment files and supplier contracts. The precise contents of the material claimed by the group remain unconfirmed.

What's at stake

Individuals whose records appear in the exfiltrated material could face follow-on misuse of personal identifiers or health information, such as fraudulent claims or unwanted contact. The organisation may incur costs related to investigation, notification and system restoration, along with possible regulatory scrutiny under Ghanaian data-protection rules. Because the scale of the data is unknown, the extent of these consequences cannot yet be quantified.

Were you affected?

Individuals who have received care or worked at International Maritime Hospita can monitor official statements from the hospital and Ghanaian data-protection authorities. A practical first step is to review account statements and credit reports for unusual activity and to change passwords for any linked services. Readers may also run a free exposure scan of their email address against known breach data sets to check whether their information has appeared in previously published collections.

AICompiled with AI assistance from public sources and published under our editorial standards.