pmrcenter.com Listed by Kairos Ransomware Group

On July 8, 2024, the Physical Medicine and Rehabilitation Center (pmrcenter.com) appeared on the leak site operated by the kairos Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack on the New Jersey-based medical practice. The disclosure does not specify the number of patients or employees affected, nor does it list exact data types beyond claiming that sensitive internal documents were taken.

Details from the Leak-Site Listing

The kairos leak page, mirrored on ransomware.live, shows a sample of the stolen data and gives the victim until a set deadline to negotiate before full publication. The entry explicitly labels the incident as a ransomware attack that combined encryption with data theft for extortion. No patient record count is provided, and the listing does not detail whether clinical notes, billing records, insurance information, or employee data were included. What is confirmed is that 53 GB of internal files were allegedly exfiltrated from the clinic’s systems.

The disclosure follows the group’s standard format: victim name, location (USA), size of the stolen archive, and a countdown clock. Public views of the page show partial file names that suggest administrative and operational records rather than a single clean database export.

Why This Matters for You and Your Family

If you or a family member has ever visited the Physical Medicine and Rehabilitation Center, your medical history, insurance details, and personal identifiers may now sit in an attacker-controlled archive. Medical data is especially damaging because it can be used for insurance fraud, prescription scams, or targeted social engineering. Even when exact record counts remain unknown, the exposure of internal files from a rehabilitation clinic typically includes names, dates of birth, Social Security numbers, addresses, treatment records, and payment information.