Moorestown Visiting Nurse Association Listed by coldlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 19, 2020, Moorestown Visiting Nurse Association appeared on a leak site maintained by the coldlock ransomware group. The listing indicated that internal files had been taken during a ransomware operation. The number of individuals whose information may be involved remains unknown, and no further confirmation of the data's contents or volume has been made public. The incident matters because the organization provides in-home medical care. Records held by such providers often include details that can be used for identity theft, insurance fraud, or unwanted disclosure of health conditions.

Inside the incident

Public records show only that Moorestown Visiting Nurse Association was added to the coldlock leak site on the reported date. The group claims to have exfiltrated internal files during a ransomware attack. No information has been released about the timing of the intrusion itself, the method of entry, the volume of data taken, or whether any ransom demand was issued or met. The scale of exposure to patients, staff, or other parties is not disclosed.

Inside coldlock

Coldlock is one of several ransomware groups that maintain public leak sites to pressure victims. These operators typically gain access through phishing, remote-desktop vulnerabilities, or compromised credentials, then deploy encryption while copying selected files. When negotiations stall, they publish file names or samples on a Tor-hosted page to signal that stolen material may be released. Prior activity attributed to similar groups has included health-care and municipal targets, though each listing must be evaluated on its own evidence.

Who is Moorestown Visiting Nurse Association?

Moorestown Visiting Nurse Association is a community-based provider of home health and hospice services. Organizations of this type routinely collect patient identifiers, medical histories, insurance details, and contact information for caregivers and family members. A breach at such an entity can affect individuals who receive care in their homes and may hold records spanning multiple years of treatment.

The information in question

The only detail released is that internal files were claimed to have been taken. The precise categories of data, the number of records, or any confirmation that patient information was among the files have not been stated by either the organization or the group. Without an official notification or forensic summary, the exact contents remain unconfirmed.

What's at stake

Health-care records can contain information useful for medical-identity theft or targeted scams. Individuals may face follow-on fraud attempts or privacy intrusions if their details circulate. For the organization, the incident adds regulatory, legal, and operational costs even if the full extent of the data remains unclear.

Were you affected?

Anyone who received services from Moorestown Visiting Nurse Association around or before March 2020 should watch for unusual activity on insurance statements, credit reports, and medical accounts. Contact information listed with the provider can be used to verify whether formal notification has been issued.

• Request a copy of your records from the organization and review them for accuracy.
• Place a fraud alert with one of the major credit bureaus if you have not already done so.
• Monitor explanation-of-benefits statements for services you did not receive.
• Use a free breach-exposure scan with your email address to check against known public data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.