CCBRT listed by the Benzona ransomware group

Overview

The Benzona ransomware group has listed CCBRT (Comprehensive Community Based Rehabilitation in Tanzania), a healthcare organisation providing affordable medical services, on its leak site. The organisation focuses on disability care and maternal health. The listing appeared on 17 January 2026.

What was published

The group claims to have exfiltrated data from the healthcare organisation. The archive is expected to include patient records, medical documentation and corporate information.

Risks for affected individuals

• Patient medical data may be exposed.
• Healthcare records are sensitive and could be used for fraud.
• Employees' personal information may be included.

What remains unknown

• The volume of data exfiltrated.
• Whether the data has been published.
• The extent of the intrusion.

What affected people should do

Patients should monitor for unusual activity and be cautious of unsolicited communications referencing the organisation. CCBRT should notify affected patients and authorities, review its systems, and follow data protection requirements for medical data breaches.