Acu Trans Solutions Listed by Coinbase Cartel Ransomware Group

On December 9, 2025, the ransomware group known as coinbasecartel added Acu Trans Solutions to its leak site and began publishing what it claims are 300 GB of internal medical files stolen from the company.

What Public Reporting Shows

Public reporting indicates that Acu Trans Solutions, a medical transportation and billing services provider, suffered a ransomware attack in which attackers exfiltrated large volumes of internal data. The group posted proof of the breach on its dark-web leak site, listing the victim and releasing samples that include sensitive medical records. Available reporting describes the exposed material as patient-related documents, billing information, and other protected health information. Exact number of individuals affected remains unknown, but the volume — 300 GB — suggests thousands of patient files may be involved. No confirmed timeline of when the intrusion occurred has been released by the company.

Why This Matters for You and Your Family

When medical transportation or billing companies are breached, the records exposed often contain your full name, date of birth, Social Security number, address, phone number, insurance details, and descriptions of medical conditions or treatments. This is the kind of information that can be used to file fraudulent tax returns, open accounts in your name, or impersonate you during medical visits. If you or any member of your family has used a medical transport service in the past several years, your information could be among the files now circulating among criminals. The breach also increases the chance that your data will appear for sale on multiple underground marketplaces in the coming weeks.

The Doxxing and Identity-Chain Implications

Medical records rarely exist in isolation. A single leaked file can link your name and address to email accounts, phone numbers, insurance logins, and even children’s names if family members were transported together. Attackers routinely chain this data with credentials stolen from other breaches to take over email, banking, or government accounts. Gaming accounts belonging to you or your children are especially vulnerable because kids often reuse simple passwords or email addresses tied to family identities; once those credentials surface, the entire household can be mapped and targeted. Public reporting on similar incidents shows that initial leaks frequently lead to doxxing campaigns, SIM-swapping attempts, and prolonged harassment when personal details become public.