Hopital La Rabta listed by the Qilin ransomware group

Overview

The Qilin ransomware group has listed Hôpital La Rabta, a major public hospital in Tunis, Tunisia, on its leak site. The listing appeared on 11 December 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the hospital. The archive is expected to include patient records, medical documentation and administrative information.

Risks for affected individuals

• Patient medical data may be exposed.
• Healthcare records are sensitive and could be used for fraud.
• Employees' personal information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Patients should monitor for unusual activity and be cautious of unsolicited communications referencing the hospital. The hospital should notify affected patients and authorities, review its systems, and follow data protection requirements for medical data breaches.