Ransomware Group: CLOAK

VICTIM NAME: Centromedicoenova

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CLOAK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak involving Centromedicoenova has raised significant concerns within the healthcare sector, particularly in Spain. The disclosed data suggests that over 100GB of sensitive information may be at risk. The leak page indicates that the incident has gained traction, with a view count of 69, underscoring its importance in the cybersecurity landscape. Details pertaining to the victim’s operations and data have not been explicitly provided; however, the healthcare focus suggests that patient privacy and data security could be at stake. The published date of this post is January 30, 2025, marking the moment this breach came to wider attention.

The group identified in this incident is known as “cloak,” which is associated with various ransomware activities. While specific download links or detailed data content were not shared in the leak’s summary, the presence of a substantial amount of leaked data raises alarms regarding the potential impact on the organization and its operational integrity. The absence of specific country details implies a broader international concern, highlighting the pervasive threat of ransomware attacks within the healthcare industry. Stakeholders are urged to remain vigilant as more information may emerge from this situation.