On January 24, 2026, the Medical Research Council Prion Unit and the Institute of Prion Diseases appeared on the leak site of the crypto24 ransomware group. The attackers claim to have exfiltrated internal files and state that full data will be released once their timer expires. Anyone whose personal information, medical records, or employment details sit inside those systems could now face exposure.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting on the ransomware.live portal states the listing of both UK-based research institutions. The crypto24 group posted a notice indicating that internal files were exfiltrated during a ransomware incident. No exact victim count has been disclosed, and the precise volume or sensitivity of the stolen data remains unclear from available reporting. The group’s typical pattern is to set a deadline after which samples or full datasets are published if ransom demands are not met.
Why This Matters for You and Your Family
Medical research facilities hold detailed records that often include names, addresses, dates of birth, contact information, and sometimes health histories of patients, study participants, employees, and their families. If your or your family member’s data was part of any prion disease study, clinical trial, or staff file, it could surface publicly. Once personal details leave secure environments, they rarely return to obscurity. Credential leaks from such breaches frequently cascade into account takeovers across email, banking, and social media.
The Doxxing and Identity-Chain Implications
Ransomware operators rarely stop at publishing raw files. They or opportunistic criminals scrape names, emails, phone numbers, and any linked accounts to build detailed profiles. These identity chains can connect professional emails to personal social media, children’s gaming usernames, and home addresses. A single exposed research record can therefore lead to doxxing campaigns, phishing attempts, or harassment that reaches every member of a household. Available reporting describes how such leaks often fuel follow-on extortion against individuals long after the initial corporate incident fades from headlines.