Heart to Heart Hospice Listed by INC Ransom Ransomware Group

On January 29, 2025, Heart to Heart Hospice appeared on the leak site of the incransom ransomware group. The Plano, Texas-based provider of palliative and end-of-life care is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of patients and employees whose records were taken remains unknown, any hospice patient, family member, or staff whose personal information passed through the organization is now at elevated risk.

What Public Reporting Shows

Public reporting indicates that Heart to Heart Hospice, founded in 2003 and headquartered in Plano, Texas, had data stolen in a ransomware incident claimed by incransom. The exposed material consists of internal files rather than a single neatly organized database. Available reporting describes the incident as a classic ransomware deployment followed by data exfiltration and public shaming on the group’s leak site. No confirmed total of affected individuals has been released, which is common in incidents involving smaller healthcare providers that serve thousands of patients and their families over time.

Why This Matters for You and Your Family

If you or someone you love received care from Heart to Heart Hospice, your medical history, contact details, insurance information, and possibly Social Security numbers or family member contacts may now sit on a criminal leak site. Medical data is especially damaging because it can be used for insurance fraud, prescription scams, or targeted phishing that sounds personal and credible. For families already dealing with serious illness, this claimed breach adds another burden at a time when emotional resources are stretched thin. Even if your name is not on the leaked files today, the addresses, phone numbers, and emails of patients often connect to spouses, adult children, and caregivers whose information travels in the same records.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely stop at posting one file dump. Once personal records appear on a leak site, other criminals scrape the data and begin linking it across the internet. A phone number from a hospice intake form can be matched to a gaming username, an old breach, or a data-broker profile. This creates an identity chain that leads from your private health information to public social-media accounts, children’s online profiles, and eventually physical addresses. Credential leaks like this one frequently cascade into account takeovers on email, banking, or gaming platforms. Gaming accounts belonging to you or your children are particularly vulnerable because kids often reuse passwords or email addresses tied to family medical paperwork.