Managed[.]com (Web Hosting Provider for Columbus County, NC, Griffin Hospital in CT, Arizona Judicial Branch, and Jackson County, OR, among others) Listed by revil Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People whose personal or administrative records are managed through web services provided by Managed[.]com may now face the possibility that internal files have left the organization's control. On November 16, 2020, the company was listed on a ransomware group's public leak site, where the operators stated they had obtained data during an attack. The number of individuals potentially affected remains unknown, and no further details on the scope or contents of the material have been released.

Inside the incident

Managed[.]com was added to the revil ransomware leak site on November 16, 2020. The listing states that internal files were taken during a ransomware operation. No information has been made public about the date the intrusion began, the volume of data involved, the encryption status of systems, or whether any ransom was demanded or paid. The number of people whose records may be included is also undisclosed.

Who is revil?

REvil is a ransomware-as-a-service operation that first appeared in public reporting in 2019. The group supplies encryption tools to affiliate attackers and commonly pairs file encryption with the threat of data release. Its operators have maintained a leak site to publish material taken from victims that decline to pay. The group has been linked to incidents across multiple industries, though each listing on its site represents an unverified claim by the operators themselves.

Managed[.]com (Web Hosting Provider for Columbus County, NC, Griffin Hospital in CT, Arizona Judicial Branch, and Jackson County, OR, among others) and its sector

Managed[.]com supplies web hosting and related infrastructure services to local government agencies and healthcare providers. Clients include county administrations in North Carolina and Oregon, a hospital in Connecticut, and the Arizona Judicial Branch. Organizations in this sector routinely store or transmit records that contain personal identifiers, case information, or health-related data belonging to residents and patients. A compromise at a shared hosting provider can therefore affect multiple downstream entities at once.

The information in question

The only detail released is that internal files were allegedly exfiltrated. No inventory of file types, no confirmation of specific data categories, and no statement on whether the material has been published have been provided. Organizations that host government and healthcare workloads commonly retain documents such as administrative correspondence, user account records, or scanned forms, yet the exact contents in this case remain unconfirmed.

Why it matters

Individuals served by the affected counties or the hospital may have records that are now outside the original custodian's direct control. Public-sector and healthcare entities rely on hosting providers to maintain confidentiality of constituent data; any confirmed exfiltration can complicate routine operations and require extended review of access logs. The absence of disclosed details leaves both the organizations and the people they serve without a clear picture of exposure.

If your data was in this claimed breach

Monitor official statements from Managed[.]com and the hosted agencies for any follow-up notices. Review account statements and credit reports for unusual activity, and consider placing fraud alerts if personal identifiers appear to be at risk. Readers can run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.