Cybersecurity — 2026-04-14
Anubis Ransomware Group Claims Two-Terabyte Data Theft from Massachusetts Hospital System
Ransomware group Anubis claimed responsibility for a cyberattack on Signature Healthcare Brockton Hospital, asserting theft of 2 terabytes of sensitive patient data without encrypting systems. The attack, detected April 6, forced ambulance diversions, canceled chemotherapy infusions, and took electronic medical records offline. The group subsequently removed Signature from its leak site, suggesting negotiations. The incident follows Anubis's unique extortion model of data theft without encryption, a tactic designed to apply pressure while maintaining hospital operational continuity.
Analysis
Anubis's data-theft-without-encryption model removes the operational disruption that typically accelerates law enforcement response, preserving extortion leverage without triggering the political pressure of a system-down hospital. The 2TB claim originates solely from Anubis's own leak site with no independent verification and may be inflated to compress negotiation timelines, a documented pattern across ransomware operators. Signature's subsequent removal from the leak site signals active negotiation, shifting Signature's exposure from ransom alone to compounding HIPAA liability regardless of payment outcome.
Anubis's data-theft-without-encryption model removes the operational disruption that typically accelerates law enforcement response, preserving extortion leverage without triggering the political pressure of a system-down hospital. The 2TB claim originates solely from Anubis's own leak site with no independent verification and may be inflated to compress negotiation timelines, a documented pattern across ransomware operators. Signature's subsequent removal from the leak site signals active negotiation, shifting Signature's exposure from ransom alone to compounding HIPAA liability regardless of payment outcome.