Mediclinic Group Listed by Everest Ransomware Group

On May 26, 2025, the Everest ransomware group added Mediclinic Group to its leak site, claiming that internal files had been exfiltrated from the private hospital operator.

What Public Reporting Shows

Public reporting indicates that Mediclinic, which operates hospitals and clinics in South Africa, Namibia, Switzerland and the United Arab Emirates, suffered a ransomware intrusion. The attackers claim to have stolen internal documents, though the precise volume and exact nature of the files remain undisclosed in available reporting. No confirmed count of affected individuals has been published, but any patient, employee or contractor whose personal information passed through Mediclinic’s systems could be exposed.

Mediclinic was established in 1983 and provides acute care, specialist services and day clinics across its international footprint. The listing on the Everest leak site follows the group’s standard pattern of publishing victim names after an initial period of private negotiation.

Why This Matters for You and Your Family

When a healthcare provider loses control of internal files, the information inside often includes names, addresses, dates of birth, medical records, national ID numbers, phone numbers and email addresses. If your family has used Mediclinic facilities in any of the four countries it serves, some of those details may now sit on a ransomware server. That data does not lose value after a few weeks; it can be sold, combined with other leaks and used months or years later for identity theft, insurance fraud or targeted scams.