PsychPlus Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

PsychPlus, a Houston-based provider of virtual and in-person mental health care, appeared on a leak site maintained by the ransomware group thegentlemen on April 14, 2026. The listing states that internal files were exfiltrated during a ransomware attack. The number of people affected has not been disclosed. The incident involves a company that handles patient records and operational data for psychiatric and therapeutic services. Such listings raise questions about the security of sensitive health information, even when the full scope remains unclear.

Breaking down the breach

The only confirmed detail is the April 14, 2026 listing itself. It asserts that internal files were taken. No information has been released on the timing of the intrusion, the volume of data, the method of access, or whether any files were later published. The number of individuals whose information may be involved is also unknown.

The group behind it: thegentlemen

Thegentlemen is a ransomware operator that maintains a public leak site to list claimed victims. The group claims PsychPlus as one of its targets through this listing. Public reporting on the actor has documented its use of encryption and data-exfiltration tactics against organizations in multiple sectors, though specific claims about this incident rest solely on the site entry.

PsychPlus and its sector

PsychPlus was founded in 2019–2020 and operates from Houston. It provides psychiatric and therapeutic services through both virtual and in-person channels, accepts most commercial insurance plans plus Medicare and Medicaid, and maintains an online booking system. Organizations in behavioral health routinely store clinical notes, appointment records, insurance details, and provider communications.

What was likely exposed

The listing refers only to internal files. The precise categories of data contained in those files have not been confirmed.

The real-world impact

Exfiltrated internal files from a mental health provider could include information that patients expect to remain confidential. Individuals may face risks of stigma, unwanted contact, or misuse of personal details. For the organization, the incident adds operational disruption and potential regulatory scrutiny common to healthcare entities.

Were you affected?

Check any communications from PsychPlus for official notifications. Review your insurance statements and credit reports for unusual activity. You can also run a free exposure scan of your email address against known breach data to see whether your information appears in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.