New Horizons Medical Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 14, 2023, New Horizons Medical was listed by the alphv ransomware group, which claimed to have carried out a ransomware attack involving the exfiltration of internal files. The number of people affected remains unknown, and public detail on the incident is limited to the group's listing and the basic description of the organisation.

New Horizons Medical is a private physician group focused on addiction recovery treatment. Any unauthorised access to its systems raises clear concerns for patients and staff because of the sensitive nature of the care it provides, even while the precise scope of what was taken has not been independently confirmed.

What happened

Public reporting states that New Horizons Medical appeared on the leak site associated with the alphv ransomware group on or around June 14, 2023. The group claimed that internal files had been exfiltrated in a ransomware attack. No further verified details have been released about the date the intrusion began, how long the attackers remained inside the network, the specific technical method used, or the volume of data involved. The number of individuals whose information may have been exposed is listed as unknown. Beyond the group's own claim on its leak site, independent confirmation of the full extent of the incident has not been made public.

The group behind it: alphv

Alphv, also widely known as BlackCat, is a ransomware operation that has been active in public reporting since late 2021. It has operated on a ransomware-as-a-service model, in which affiliates carry out intrusions and deploy the group's encryptors and leak-site infrastructure. The group has typically combined data theft with encryption, threatening to publish stolen material if a ransom is not paid. Alphv has been linked in open-source reporting to attacks across multiple sectors, including healthcare and professional services, and has used double-extortion tactics as a core part of its approach. In this case, the listing of New Horizons Medical constitutes a claim by the group; it should be treated as unverified unless corroborated by the organisation or independent investigation. No additional statements attributed specifically to alphv about this victim beyond the leak-site listing are part of the available public record.

New Horizons Medical and its sector

New Horizons Medical, PC, was founded in 2009. It is a private physician group whose stated focus is the safe prescription of buprenorphine, commonly known by the brand name Suboxone, for patients engaged in recovery from opiate dependence. Organisations of this type sit at the intersection of primary medical care and specialised addiction treatment. They routinely handle clinical records, prescribing information, and personal identifiers belonging to people seeking help for substance-use disorders.

A breach affecting such a practice is consequential because the data involved often includes highly sensitive health information. Patients in recovery may face particular risks if details of their treatment become known outside the clinical relationship. The sector as a whole has been a repeated target for ransomware groups precisely because of the value and sensitivity of the records held and the operational pressure that disruption can create.

The information in question

The available facts state only that internal files were exfiltrated in a ransomware attack. No itemised list of data types, file names, or record counts has been disclosed in the public summary. Exact contents therefore remain unconfirmed.

Physician groups that specialise in medication-assisted treatment for opiate dependence typically maintain patient demographic details, clinical notes, prescription and dosing records, insurance or billing information, and communications related to care. Staff and administrative files may also exist on the same systems. While these categories are characteristic of the sector, it is not established that any specific subset was present in the material alphv claims to have taken. Readers should treat the exposure of particular data elements as unverified until further official detail appears.

The real-world impact

For individuals whose information may have been involved, the primary risks are misuse of personal and health data. Exposure of treatment records related to opiate dependence can lead to stigma, targeted phishing, or attempts at identity fraud. Even without confirmed identity-theft cases tied to this incident, the possibility of long-term privacy harm remains. Because the number of people affected is unknown, it is not possible to quantify how widely these risks apply.

For the organisation itself, a ransomware incident that includes data exfiltration can disrupt clinical operations, require forensic investigation and system rebuilding, and trigger notification and regulatory obligations. Trust between patients and a recovery-focused practice can also be affected when confidentiality is called into question. These consequences follow from the nature of the claimed attack rather than from any public finding of fault.

If your data was in this claimed breach

If you are a current or former patient or employee of New Horizons Medical, consider taking practical steps while official notifications, if any, are still pending. Monitor financial and insurance statements for unfamiliar activity. Be cautious of unsolicited calls, emails, or messages that reference your medical care or ask for personal details; verify any such contact through known official channels. Consider placing a fraud alert or credit freeze with the major credit bureaus if you believe sensitive identifiers may have been exposed. Keep records of any correspondence you receive about the incident.

You can also run a free exposure scan of your email address to check whether it has already appeared in known breach datasets. That step does not confirm or rule out involvement in this specific incident, but it can help you understand your broader exposure and decide what further monitoring is warranted.

AICompiled with AI assistance from public sources and published under our editorial standards.