International Maritime Hospita Listed by thegentlemen Ransomware Group

On April 14, 2026, the International Maritime Hospital in Tema, Ghana, appeared on the leak site of the ransomware group known as The Gentlemen. The government-affiliated facility, which provides 24/7 maritime and general healthcare services, had internal files exfiltrated during a ransomware attack. Although the exact number of patients and staff affected remains unknown, any personal or medical information contained in those files is now at risk of public exposure or further criminal use.

Reported Details from Reporting

Public reporting indicates that The Gentlemen posted proof of the breach on their leak site, referencing both imah.gov.gh and a ZoomInfo business listing for the hospital. The data consists of internal files obtained after the group gained access to the hospital’s systems. No specific patient count or detailed list of exposed record types has been publicly itemized, but ransomware incidents of this nature routinely involve names, addresses, dates of birth, national identification numbers, medical histories, and billing information.

The hospital is ranked among Ghana’s top ten facilities and serves both local residents and international medical tourists. Its 24/7 operation includes operating theatres, maternity wards, an oxygen plant, morgue, and emergency care. Because it is a government-affiliated institution, the breach raises questions about the security standards applied to public health infrastructure.

Why This Matters for You and Your Family

Even if you have never visited the International Maritime Hospital, medical data breaches affect ordinary people in unexpected ways. If you or any member of your family has received treatment there, your medical history could be combined with other leaked information to build a detailed profile. Criminals use such profiles for insurance fraud, identity theft, or targeted phishing that appears legitimate because it references real past procedures or diagnoses.

Medical records never expire. A breach today can lead to consequences years from now when the same information is sold on underground markets or used to impersonate you during a loan application or government benefit claim. For families, one exposed parent record can quickly expose children when addresses, phone numbers, and email accounts overlap.

The Doxxing and Identity-Chain Risk

Ransomware groups rarely stop at posting a single file dump. Once internal documents leave a hospital network, they frequently contain employee directories, supplier contracts, and patient contact lists that link real names to email addresses, phone numbers, and sometimes national ID cards. These links allow attackers — or anyone who buys the data — to trace your online handles back to your physical identity, creating what security professionals call an identity chain.

Credential leaks like this one cascade into account takeovers. A password or email address taken from hospital systems is often reused on personal banking, social media, and gaming platforms. When those accounts fall, the chain grows longer and more dangerous, leading to doxxing, harassment, or financial theft. This is why the same protective measures that safeguard your health records also protect gaming accounts belonging to you or your children.

The Gentlemen Ransomware Group

Public reporting attributes the attack to The Gentlemen, a ransomware operation that emerged in recent years and has targeted organizations across multiple sectors. The group’s typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before deploying encryption. They then demand payment and, if unpaid, publish samples or full datasets on their leak site to pressure victims. Notable prior victims have included various corporations and public institutions, though exact details remain limited in open sources.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can break chains before criminals exploit them.
• Rotate any password you have used at the International Maritime Hospital or related Ghana government services, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the household with DoxxScan family protection that extends to your children and their gaming accounts, which often become targets when parent credentials are exposed.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The incident at the International Maritime Hospital shows that government-affiliated health facilities remain attractive targets and that the resulting data can circulate for years. Taking concrete steps now limits how far any single breach can reach into your life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts.