Paramount Health Services & Insurance TPA Pvt. Ltd
bd_a7ea13dba5ae01b3 · schema v1 · pii pii-v1
Full breach record for Paramount Health Services & Insurance TPA Pvt. Ltd →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Medi Assist says subsidiary Paramount TPA faced cyber incident; systems restored - CNBC TV18. Paramount Health Services & Insurance TPA Private Ltd: Medi Assist Healthcare Services Ltd reported that a subsidiary, Paramount Health Services & Insurance TPA Private Ltd, suffered a security breach affecting some of its systems and services. The incident was limited to Paramount TPA's infrastructure and had no impact on Medi Assist or its other subsidiaries. (via eCrime.ch). Linked ransomware group: blacknevas.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Nov 19, 2025
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteblacknevasbd_f2d474c9fdc7e7a12025-11-20 · +1dCandidate
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
blacknevas
According to ransomware.live, BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.