On September 23, 2024, the Everest ransomware group listed Pureform Radiology Center on its leak site, claiming that the Canadian medical imaging provider had been hit by a ransomware attack in which internal files were exfiltrated. The disclosure indicates that all medical records and internal documents were stolen, and it highlights the discovery of what the group claims is a zero-day exploit in software belonging to the company that acquired Pureform. Anyone whose imaging, diagnostic, or administrative records passed through Pureform Radiology Center may now have their personal health information and other sensitive details exposed.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Pureform Radiology Center
Get alerted the next time Pureform Radiology Center files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Pureform Radiology Center’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The Everest leak-site entry states that attackers gained access to Pureform Radiology Center’s systems and exfiltrated internal files. It explicitly claims the theft included all medical records along with other internal documents. The posting does not quantify the number of affected individuals, nor does it provide a precise timeline of the initial intrusion or the date of data exfiltration. The listing also notes that Pureform’s president engaged a recovery negotiator, though it does not detail the outcome of those discussions or any ransom demand amount. The primary disclosure source remains the Everest onion site, mirrored on ransomware tracking platforms such as ransomware.live.
Why This Matters for You and Your Family
Medical imaging centers like Pureform handle highly sensitive personal information: names, dates of birth, health insurance numbers, diagnostic images, radiology reports, and often Social Insurance Numbers or driver’s licence details for billing. When this data leaves controlled systems, the exposure risk is permanent. You or your family members who had scans, ultrasounds, MRIs, or X-rays at Pureform now face the possibility that their full health history could be used for identity theft, insurance fraud, or targeted phishing. The disclosure does not specify exactly which data fields were taken, so the safest assumption is that everything stored on the compromised systems must be treated as exposed.
Doxxing and Identity-Chain Risks
Health data rarely travels alone. A radiology record typically links your legal name, date of birth, address, and phone number to your medical history. Attackers can combine this with any usernames, email addresses, or passwords found in the internal documents to build an identity chain that reaches your online accounts, workplace systems, and even your children’s profiles. Credential leaks of this nature frequently cascade into gaming account takeovers, where a child’s username and reused password grant intruders entry to Discord, Steam, or Roblox accounts tied to the same household address. Once initial access is achieved, doxxing accelerates: public records, social-media handles, and breached health details are stitched together to create detailed profiles that can be sold or used for extortion. The longer these chains remain unmapped, the higher the chance of follow-on targeting months or years after the initial breach.