Grupo D'arc Listed by Qilin Ransomware Group

On March 2, 2026, Brazilian healthcare provider Grupo D'arc appeared on the leak site of the qilin ransomware group, which claims to have stolen and is prepared to publish the company's internal files.

What Public Reporting Shows

Public reporting indicates that Grupo D'arc was listed on the qilin ransomware group's data leak portal. The listing states that internal data was exfiltrated during a ransomware incident. No specific volume of records or exact types of documents have been publicly detailed beyond the general description of internal files. The affected organization operates in the healthcare sector in Brazil, a field that routinely handles sensitive personal information such as patient records, billing data, and employee details.

Available reporting describes the incident as a classic ransomware double-extortion scenario in which the threat actors first encrypt systems and then threaten to release stolen data unless a ransom is paid. As of the listing date, March 02, 2026, the files had not yet been publicly released on the leak site.

Why This Matters for You and Your Family

When a healthcare provider's internal systems are breached, the information that can be exposed often includes names, addresses, dates of birth, national identification numbers, medical histories, and insurance details belonging to ordinary patients and their families. If you or your family members have ever received care from Grupo D'arc or any affiliated clinics, your personal data may now sit in an attacker-controlled archive.