NORTHEAST OHIO NEIGHBORHOOD HEALTH SERVICES (NEON) Listed by Medusa Ransomware Group

Northeast Ohio Neighborhood Health Services (NEON) was listed on the Medusa ransomware group’s leak site on April 18, 2024. The Federally Qualified Health Center, which has served Cleveland-area patients since 1967, had 50.96 GB of internal files exfiltrated during a ransomware attack. The disclosure indicates that patient and operational records were taken, though the exact number of individuals affected remains unknown.

Details in the Medusa Listing

The primary disclosure on the Medusa leak site states that NEON suffered a ransomware intrusion and that attackers successfully exfiltrated 50.96 GB of internal files. The listing does not specify the precise data types beyond “internal files,” nor does it quantify how many patient records or employee records were included. No ransom demand figure is published on the site, and the disclosure does not reveal the initial access vector or exact date of the intrusion. The Medusa operators have set a deadline for payment before they begin publishing additional samples or the full archive.

NEON has not yet issued a public breach notification detailing the scope, so the only What's Publicly Reported come directly from the Medusa leak-site entry.

Why This Matters for You and Your Family

If you or your family have received care at any NEON clinic, your medical history, appointment details, insurance information, and possibly Social Security numbers or addresses may now sit inside the 50.96 GB archive. Health data is especially sensitive because it can be used for insurance fraud, prescription scams, or targeted phishing that references real treatments. Even if the full dataset has not yet been released, the mere fact that Medusa possesses it creates immediate risk. Families who rely on community health centers often have children in the system, meaning pediatric records and guardian contact details are also at stake.