Biomedical Caledonia Medical Laboratory was listed on the Incransom ransomware leak site on November 02, 2024. The private Jamaican medical laboratory, which operates 46 collection centres and has served the island since 1968, is the latest victim claimed in an active extortion campaign. The disclosure indicates that internal files were exfiltrated during a ransomware attack, though the exact volume and specific categories of data remain undisclosed by the group.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Details from the Leak Site
The Incransom leak site posting states that Biomedical Caledonia Medical Laboratory Limited suffered a ransomware intrusion and that attackers successfully removed internal files. No patient record count is provided, nor does the listing specify the precise data types beyond “internal files.” The notification does not include a public ransom demand figure or a firm publication deadline, which is consistent with many Incransom entries that rely on private negotiation followed by selective data dumps if payment is refused. Public reporting on the group indicates that such listings typically follow an initial encryption event and subsequent exfiltration of documents from Windows servers or shared drives.
Why This Matters for You and Your Family
When a medical laboratory’s internal files are stolen, the exposure can reach far beyond the company. Test results, referral letters, billing records, and staff rosters often contain names, addresses, dates of birth, national identification numbers, and detailed health information for thousands of ordinary Jamaicans and their families. Even without an exact victim count, the breach represents a high risk because health data is permanent and difficult to change. If your blood work, pathology report, or family member’s test was processed at any of Caledonia’s 46 collection centres in the past 56 years, your sensitive details may now sit in an attacker’s archive. This kind of leak can lead to insurance denial, employment discrimination, or blackmail long after the initial incident fades from headlines.
Doxxing and Identity-Chain Risks
Medical records rarely exist in isolation. A single leaked lab report frequently links your full name to a home address, phone number, email address, and sometimes a government ID. Attackers and subsequent data brokers can chain these fragments with credentials stolen from other breaches, creating a detailed profile that fuels account takeovers, SIM swapping, and targeted phishing. Children’s records are especially vulnerable because parents often use the same email or password across family accounts, including gaming logins. Once an identity chain is mapped, doxxing escalates quickly from leaked lab data to public shaming or financial fraud. Credential leaks like this one cascade into account takeovers and doxxing chains that can affect every member of a household.