RANSOMWARE VICTIMHEALTHCARE

Cook Medical LLC

shinyhunters📍 United States (US)📅 August 14, 2026
8
same group

Attack Intelligence

Cook Medical LLC was compromised in a ransomware attack attributed to shinyhunters in August 2026. The organization, operating in the Healthcare sector in United States, was added to the group's data leak site as part of an extortion campaign.

shinyhunters operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Customer data, employee data, and other internal corporate data was compromised. The Company engaged with us but made several paltry offers, did not want to pay what we asked for and decided they are okay with the data leak to happen instead of increasing their offer by a little, then we'd likely have accepted and this post would not have gone up. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 182GB+ (compressed) | Updated: 14 August 2026 | SHA256: 8a87ba511f25f20a193f05a6578a620b02302c2075a6f2dff428d1f1a826ba63

Additional Details

Other Victims — shinyhunters (8)

Quick Facts

CountryUnited States (US)
SectorHealthcare
Attack DateAug 14, 2026
Intel Sourceransomware.live

Threat Group

shinyhunters
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.