Ransomware
Location not known1 source
ClaimedFalcon says it has data from Astrana Health. Astrana Health has not confirmed it. No confirmation after 19 days.
Confirmed
No confirmed figure
Claimed
470 GB
Claimed by Falcon. Not verified.
Data involved
Cause
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.
25 Oct 2026
Leak-site claim by Falcon, tracked by RansomLook
25 Oct 2026
Status: claimed
Falcon
Claimed by the group on its leak site, 25 Oct 2026.
This is only a claim by the attackers so far. There is no need to panic, but the basics are worth doing.
That it happened as stated 10%
The place 0%
1 independent source. Location not known.
Not known yet
CISA Known Exploited Vulnerabilities, NVD, CVE.org, CIRCL Vulnerability-Lookup, GitHub Advisory Database (CC BY 4.0), OSV (CC BY 4.0), RansomLook (CC BY 4.0, enriched by Black Shard), SEC EDGAR, HHS breach portal, Have I Been Pwned (CC BY 4.0), Texas Attorney General, California Attorney General, Delaware Department of Justice, Vermont Attorney General, GDELT Project, Cloudflare status, abuse.ch SSLBL (CC0), CISA ICS advisories, NCSC UK (OGL v3.0), CERT-EU (CC BY 4.0), NCSC New Zealand (CC BY 4.0), MISP galaxy (CC0), OAIC determinations (CC BY 4.0), abuse.ch Feodo Tracker (CC0), Spamhaus DROP (Spamhaus DROP terms), blocklist.de, CINS Army, CERT-FR (Licence Ouverte 2.0), Red Hat Security Data (CC BY 4.0), ENISA EUVD, Microsoft MSRC, JVN iPedia, FIRST EPSS, IODA, GeoNames (CC BY 4.0), Natural Earth, Wikidata, Regional Internet Registries (delegation statistics), Protomaps, OpenStreetMap contributors (ODbL), NASA GIBS. Items link to their sources, except leak-site claims, which are never linked. This product uses the NVD API but is not endorsed or certified by the NVD.
Built on open-source software under the MIT licence. Map data from Natural Earth, NASA GIBS, Protomaps and OpenStreetMap contributors.
© 2026 Black Shard Pty LtdABN 66 696 910 773