iGlobal Services, Medenet Listed by Akira Ransomware Group

On January 29, 2026, the Akira ransomware group listed both iGlobal Services and Medenet on its leak site and announced plans to publish 24 GB of stolen corporate data containing employees’ and customers’ driver’s licenses, passports, Social Security numbers, contracts, financial records, NDAs, and other confidential files.

What Public Reporting Shows

Public reporting indicates the two firms were compromised in a single ransomware incident. iGlobal Services is a risk-management company that specializes in cybersecurity solutions for regulated industries. Medenet supplies electronic health record systems, practice management tools, credentialing, and medical coding services to physician practices. The attackers claim they have already exfiltrated the data and will begin releasing it in batches. No exact number of individuals affected has been disclosed, but the volume and sensitivity of the files suggest thousands of patient and employee records may be exposed.

January 29, 2026 marks the public listing date. The group stated it intends to publish “very detailed” personal information including DLs, passports, SSNs, financial documents, and internal contracts. As of this writing the full archive has not yet appeared, but ransomware.live continues to track the Akira leak page.

Why This Matters for You and Your Family

When a healthcare vendor and a cybersecurity firm lose control of names, Social Security numbers, driver’s licenses, and passports in one breach, the risk does not stop at those two companies. If you or anyone in your household has been a patient at a practice that uses Medenet, or if you have done business with a company that relied on iGlobal’s services, your information could be in the 24 GB archive. Once SSNs and government ID scans are loose, identity thieves can open accounts, file fraudulent tax returns, or sell the data on underground markets for years to come.

Your family’s exposure is not limited to the original breach. These records often become the foundation for larger doxxing campaigns that link your work email to personal accounts, home address, and even your children’s online profiles.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stay isolated. A single spreadsheet that contains an employee’s work email, phone number, and SSN can be cross-referenced with data from previous breaches to map an entire household. Attackers then target linked gaming accounts, social-media handles, and family-shared passwords. Children’s gaming credentials are especially attractive because young users often reuse simple passwords and parents may not monitor those platforms. A credential leak of this kind can cascade into account takeovers that expose chat logs, location data, and photographs, feeding further extortion attempts.

Akira Ransomware Group’s Track Record

Public reporting attributes the attacks to the Akira ransomware group, which emerged in 2023. The group has previously listed healthcare providers, technology vendors, and professional-services firms. Its typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by claimed exfiltration of sensitive files before encryption. Akira then demands ransom and, if unpaid, publishes samples or the full archive on its leak site to pressure victims. The group’s postings frequently highlight stolen personal data such as passports and Social Security numbers, exactly as described in the iGlobal/Medenet notice.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to this claimed breach.
• Rotate any password you used at iGlobal Services or Medenet and enable two-factor authentication with an authenticator app everywhere that same password appears.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the household with DoxxScan family protection that includes dependents and your children’s gaming accounts, which frequently become targets when credential leaks cascade into doxxing chains.
• Let remediation specialists handle takedown requests for any exposed personal documents that appear on data-broker or underground sites.

The incident shows that even specialized service providers can become gateways to your family’s most sensitive identifiers. Acting quickly on the exposed data and maintaining ongoing visibility is the most practical defense. DoxxScan by GalaxyWarden delivers that combination of continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists who also protect household and children’s gaming accounts.