GLOBALMalwareHealthcareHealthcareRansomwareHunters InternationalRansom DemandedActor NamedMedium

Carespring Health Care Management LLC

bd_887aaa3e9b883362 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 10, 2024

To disclose

—

Affected

Not disclosed

Linked

13 filings

Confidence

50%

Full breach record for Carespring Health Care Management LLC →2 incidents on file

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Hunters International on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: HealthcareDiscovered: 2024-02-10

Listing address (not linked): https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/companies/6690122385View merged incident timeline

Source: Ransomware.live

Post text · scraped from the leak site

Country : United States of America - Exfiltraded data : yes - Encrypted data : no

J jump to incidentP pin to compareR raw source

Incident timeline — mostly unverified

? — ?

Breach window unknown

Feb 10, 2024

Claim posted

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

—

Compliance clock

Not assessable

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_1424aadc66b2163b2024-05-06 · +85dVerified by operator

Regulatory filings (9) · sorted by filing gap

Illinois State AGbd_35ad741ba7e06c842024-08-01 · +172dVerified
HHS OCRbd_5c6b4598c571c42c2024-08-15 · +186dVerified by operator
Indiana State AGbd_707fbbefa9c132d82024-08-15 · +186dVerified by operator
Vermont State AGbd_b1b6cf27a3455f122024-08-15 · +186dVerified by operator

Show 5 more filings ↓up to 212d gap

Maine State AGbd_3515140b05c45d592024-08-16 · +187dVerified
Massachusetts State AGbd_abe1869afcfdba212024-08-16 · +187dVerified
New Hampshire State AGbd_c7f24252bf65f76b2024-08-19 · +190dVerified by operator
Maine State AGbd_e21a0c9a61ebb45d2024-09-09 · +211dVerified
Vermont State AGbd_e34bff3cc918e1472024-09-10 · +212dVerified

Showing first 10 of 12 linked disclosures.

Name: hunters
norm: hunters_international

Name: Carespring Health Care Management LLC
norm: carespring health care management
Domain: carespring.com
Industry: Healthcarellm

Attack vector: Ransomware· hunters_international
Threat actor: Hunters InternationalExternalFinancial

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.
Confidence context: Single unverified source — the attacker's own description. When a regulatory filing corroborates the claim, it appears in the linked-filings card.

Filing propagation · 10 filings · 7 states

View merged incident ↗

Leak SiteFeb 10 · first · this page

Illinois State AG+172d

HHS OCR+186d

Indiana State AG+186d

Vermont State AG+186d

Maine State AG+187d

Massachusetts State AG+187d

New Hampshire State AG+190d

Maine State AG+211d

Vermont State AG+212d

Pattern: first filing Feb 10, last Sep 10 (VT) — a 212-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

actor name
victim claim
ransom/leak status
discovery date
materiality
notification
affected count
confirmed data types
compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

Source URL: https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/companies/6690122385
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 10, 2024
Raw hash: 2b83a802aa179a42c389b3f2186de06124790a5c8514f99d43e0aa26b34ae317

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityhunters

Victim entityCarespring Health Care Management LLC

What this source establishesRansomware

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancehunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion