A Sensitive Touch Home Health;Alphastar Home Health Care;Heart of Texas Home Healthcare Se Listed by Everest Ransomware Group

On November 15, 2024, the Everest ransomware group listed A Sensitive Touch Home Health, Alphastar Home Health Care, and Heart of Texas Home Healthcare Services Inc. on its leak site, announcing that internal files had been exfiltrated during a ransomware attack. The posting warns company representatives to contact the attackers before the deadline or face public release of the stolen data, which the group claims includes medical records and personal information.

Details from the Leak-Site Listing

The Everest leak page states that the three home-health organizations suffered a ransomware intrusion in which attackers gained access to internal systems and removed files. The disclosure indicates that the data set contains medical records along with other personal information belonging to patients and employees, though the exact number of individuals affected is not specified. The listing does not quantify the volume of records taken or name the specific systems compromised beyond noting that internal files were allegedly exfiltrated. A countdown timer typical of Everest’s extortion method accompanies the post, pressuring the victims to negotiate before the material is published.

The primary disclosure makes clear that the incident is not simply an encryption event; the attackers deliberately copied data before triggering any ransomware payload, a standard double-extortion tactic.

Why This Matters for You and Your Family

If you or a family member received care from A Sensitive Touch Home Health, Alphastar Home Health Care, or Heart of Texas Home Healthcare Services Inc., your medical history, Social Security numbers, addresses, and insurance details may now sit on a criminal server. Home-health agencies routinely handle highly sensitive records for elderly patients, children with special needs, and chronically ill individuals. When that information reaches the dark web, it creates lifelong exposure. Identity thieves can file fraudulent tax returns, open accounts in your name, or sell your medical details to counterfeit-prescription rings. The breach affects not only the patient but often spouses, dependents, and caregivers whose contact information appears in admission or billing files.

Doxxing and Identity-Chain Risks

Medical breaches like this one frequently cascade into full doxxing chains. A single leaked email or phone number can be cross-referenced with gaming accounts, social-media handles, and family-member profiles. Attackers then map an entire household, targeting children’s usernames on Roblox, Fortnite, or Discord that reuse the same password or recovery email. Once an attacker controls a child’s gaming account, they can harvest additional personal details shared in voice chats or linked payment methods. The Everest listing does not detail what was taken, but public reporting on similar incidents shows that even partial patient spreadsheets are enough to bootstrap these identity chains.

Everest Ransomware Group Track Record

Public reporting attributes the Everest ransomware operation to a group that emerged in 2021. The actors have targeted hospitals, clinics, and healthcare providers repeatedly, favoring organizations that cannot afford extended downtime. Their typical playbook begins with phishing or compromised remote-desktop credentials, followed by lateral movement to exfiltrate data before deploying encryption. Everest then posts samples on its leak site and demands payment to prevent full publication. The group’s postings consistently emphasize stolen medical and personal records, knowing the regulatory and reputational pressure this places on healthcare victims.

What to do

• Run a DoxxScan to map every link between your emails, phones, handles, and real identity so you can see exactly what this claimed breach connects to.
• Rotate any password used at the affected home-health providers and enable 2FA through an authenticator app everywhere that same password appears.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential-stuffing attacks.
• Let remediation specialists handle data-broker takedowns and opt-out requests on your behalf while you focus on securing your accounts.

The incident underscores how quickly healthcare data can move from a provider’s server to an extortion marketplace. Taking concrete steps now limits what criminals can build from this claimed breach. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk of cascading takeovers.