What Happened?
On or around August 28, 2026, dark web monitoring websites including Ransomware.live detected that the cybercriminal threat group known as Rhysida had claimed a breach of Valley Health Team’s systems in a post made to the group’s dark web leak site. Rhysida claims to have exfiltrated over three terabytes (3.28 TB) of data from VHT, allegedly including, among other things, sensitive personal and medical information of patients. In its dark web post, Rhysida included images that appear to be documents taken from VHT.
As of publication, VHT has not confirmed the alleged breach’s authenticity. Details of the alleged breach, such the full scope of potentially affected information and the number of potentially affected individuals, remain under investigation.