Clínica Dávila
Attack Intelligence
Clínica Dávila was compromised in a ransomware attack attributed to devman in December 2025. The organization, operating in the Healthcare sector in Chile, was added to the group's data leak site as part of an extortion campaign.
devman operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Patients' full records, HIV test results, IDs. Throughout a long waiting period, and despite a vast number of phone calls and emails sent by our team to the hospital, we have seen no action from the clinic to resolve the issue - knowing that the HIV tests could potentially change the lives of people whose relatives, friends, and workplaces will...