Insomnia — Ransomware Profile
Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations, stealing patient files and threatening public exposure rather than encrypting files, and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.IntelFusions coverage (1)
- YouTube gaming channels fed a two-year malware market 2026-09-09 · Cyber Incidents
Recent claimed victims
- Praxis EMR 2026-10-05
- Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC 2026-09-15
- Massey, Stotser & Nichols 2026-09-14
- Metropolitan Community Health Services 2026-09-14
- NorthShore Health Centers 2026-09-07
- Maglin, Miskiv & Associates 2026-09-03
- Metro Tulsa Foot 2026-08-31
- Aurora Health Management 2026-08-19
- Codinter 2026-08-17
- Park Place Behavioral Health Care 2026-08-06
- Laempe Reich 2026-07-31
- Merritt Woodwork 2026-07-31
- Sky Solutions 2026-07-29
- Brooklyn Defender Services 2026-07-24
- The Vant Group 2026-06-12
- Mid-Cumberland Human Resource Agency 2026-06-09
- Nephrology Associates 2026-04-28
- METO Systems 2026-04-24
- United Medical Doctors 2026-04-09
- Noble Inc. 2026-04-07
- Atlas Ocean Voyages 2026-03-23
- Valley Family Health Care 2026-03-18
Vendor research
- Insomnia (Threat Group Profile) Halcyon