casamedica.com.gt Listed by benzona Ransomware Group

On January 30, 2026, the ransomware group benzona listed Casamedica.com.gt on its leak site and began publishing what it claims are the Guatemalan medical supplier’s internal files.

Confirmed details of the breach

Public reporting indicates that benzona claims to have exfiltrated internal documents from Casamedica, a Guatemala-based distributor of surgical instruments, hospital furniture, diagnostic equipment and related maintenance services. The exact number of people whose personal or financial information appears in the files remains unknown. No sample data has been independently verified by third parties, and the company has not issued a public statement detailing what was taken or when the intrusion occurred.

The listing appeared on the benzona leak portal, which is tracked by ransomware.live. As of the publication date, the group continues to post additional batches of alleged Casamedica files while threatening further releases if demands are not met.

Why this matters for you and your family

Medical suppliers like Casamedica routinely handle names, addresses, national ID numbers, insurance details, payment records and sometimes health information for patients, doctors and staff. When those records appear on a ransomware leak site, the data can be downloaded by anyone. Once downloaded, it never disappears.

For ordinary families this can mean sudden spam, identity-theft attempts, fraudulent loan applications in your name, or targeted scams that reference your recent medical purchase or a family member’s procedure. Children’s information included in household medical or billing files can also surface later in gaming-account takeovers or school-related fraud.

The doxxing and identity-chain risk

Ransomware leaks rarely stop at one company. Criminals combine the newly exposed records with data from earlier breaches to build detailed profiles. An email address taken from Casamedica can be matched to your username on a gaming platform, your child’s Roblox or Minecraft account, a family member’s social-media handle, and a reused password. That linkage turns a single breach into a chain that leads directly to your home address, phone number and daily routines.

Credential leaks like this one cascade into account takeovers and doxxing chains. Public reporting shows that families often discover the damage only after a loan is denied, a bank account is drained or strangers begin contacting them with personal details.

Benzona’s publicly known track record

Public reporting attributes the benzona ransomware operation to a group that surfaced in late 2024. It has claimed responsibility for attacks on hospitals, clinics, logistics firms and small manufacturers across Latin America and Europe. Typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of internal files, encryption of systems, and dual extortion: demanding payment to decrypt and a second fee to prevent publication. When victims do not pay, benzona gradually drips data onto its leak site over days or weeks.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, gaming handles and real identity so you can see exactly what chains back to the Casamedica exposure.
• Rotate any password you used at Casamedica or any medical supplier and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can be hijacked through the same leaked credentials.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The Casamedica incident is a reminder that medical-supply breaches affect the patients and families whose information travels with the invoices and service records. Acting quickly on the credentials and linkages you can control limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers that continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts.