ARTEMIS HEALTHCARE I HEDGECO, LLC
bd_446526c32bfe1735 · schema v1 · pii pii-v1
Full breach record for ARTEMIS HEALTHCARE I HEDGECO, LLC →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Crypto24 on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
It contains sensitive personal data, including medical records, official documents, and imaging files of millions of patients, as well as various databases.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jun 18, 2025
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Vermont State AGbd_7bc2ee7fff02d1432025-12-23 · +188dVerified
- HHS OCRbd_df89e3fc181e39602025-12-23 · +188dVerified
Filing propagation · 3 filings · 2 states
View merged incident ↗Pattern: first filing Jun 18, last Dec 23 (TN) — a 188-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
crypto24
According to ransomware.live, Crypto24 is a double-extortion ransomware-as-a-service group that surfaced on the RAMP forum in mid-2024, targeting large organizations in financial services, healthcare, manufacturing, and technology across Asia, Europe, and North America, with notable victims including CMC Group, Vietnam's second-largest ICT conglomerate.