Park Place Behavioral Health Care Listed by Insomnia Ransomware Group

On August 06, 2026, the Insomnia ransomware group listed Park Place Behavioral Health Care on its leak site, claiming the Florida-based mental health and substance use provider was hit by a ransomware attack in which internal files were exfiltrated. The organization, which serves Osceola County and has offered crisis intervention, therapy, recovery support, and telehealth services for more than 40 years, has not publicly confirmed the incident as of this writing.

Leak Site Claim Details

The Insomnia leak-site listing states that internal files were exfiltrated during a ransomware attack but does not disclose the volume of data taken, the specific types of records involved, or the number of individuals affected. The group has not published any sample files at the time of analysis. Because the primary disclosure comes solely from the threat actor’s own leak site via RansomLook, this remains an unconfirmed claim. Park Place Behavioral Health Care has issued no official breach notification, and no regulator or federal agency filing has yet appeared.

Public reporting on Insomnia indicates the group typically uses its leak site to pressure victims into payment by threatening to publish stolen data. The exact deadline, if any, set for this victim is not visible in the current listing.

Why This Matters for You and Your Family

If you or a family member have received mental health services, substance use treatment, crisis intervention, or medication-assisted care through Park Place Behavioral Health Care, your personal information may be at risk. Health records are among the most sensitive categories of data because they can reveal diagnoses, treatment histories, medication details, and family relationships. Exposure of such information can lead to stigma, discrimination in employment or insurance, and increased risk of targeted fraud or harassment.

Even though the precise data types and affected user count remain unknown, the nature of the provider means the records likely include names, dates of birth, Social Security numbers, contact information, insurance details, and clinical notes for thousands of residents in Osceola County and surrounding areas.

Doxxing and Identity-Chain Risks

A breach at a behavioral health provider creates particularly dangerous doxxing and identity-chain implications. Mental health records often link directly to home addresses, phone numbers, email accounts, and family member information. These details can be combined with credential leaks from other sources to seize control of online accounts, including gaming profiles belonging to you or your children. Once an attacker maps an identity chain from a clinical record to a gamer tag, Discord handle, or social media account, the risk of swatting, extortion, or public exposure increases sharply.

Children’s gaming accounts are especially vulnerable in these cascades because parents frequently reuse passwords or security questions tied to family medical history. The leak-site claim therefore endangers not only adult patients but also household members whose identities are indirectly exposed through shared addresses and contact data.

Insomnia Ransomware Group Track Record

Public reporting attributes the Insomnia ransomware group’s emergence to late 2024. The group has targeted healthcare providers, local governments, and mid-sized businesses across the United States and Europe. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by deployment of ransomware, exfiltration of sensitive files, and dual extortion—demanding payment both to decrypt systems and to prevent publication of stolen data. Insomnia is known for relatively short negotiation windows and for following through on leak-site threats when victims do not pay.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what chains back to the Park Place Behavioral Health Care records.
• Enable continuous DoxxScan monitoring across 13.1 billion breach records and more than 100 platforms so the next exposure of your information is caught and addressed in hours rather than months.
• Rotate any password you have ever used when registering for services at Park Place Behavioral Health Care and enable 2FA through an authenticator app on every account where that password was reused.
• Let remediation specialists handle takedown requests for any exposed personal information appearing on data broker sites or underground forums.
• Note that a leaked home address places everyone living at that address at risk; your own timely removal requests are what begin to pull that address out of public circulation.

The incident underscores how even a single unconfirmed ransomware claim can ripple outward and endanger the privacy of an entire community that relies on confidential care. Taking proactive steps now limits what attackers can build from any data that may have been taken. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists give individuals the practical tools needed to reduce these long-term risks.