International Maritime Hospital (IMaH) Ghana listed by thegentlemen ransomware group

<p>On 14 April 2026, the <strong>thegentlemen</strong> ransomware group listed <strong>International Maritime Hospital (IMaH)</strong> on its dedicated leak site in Ghana. The group claims to have exfiltrated data from the organisation, a healthcare organisation, before publishing the victim on its leak site.</p> <h2>What the source reveals</h2> <p>imah.gov.gh zoominfo.com/c/international-maritime-hospital-imah/1339985496 IMaH (International Maritime Hospital) is a government-affiliated, world-class healthcare facility located in Tema, Ghana, operating 24/7 year-round including holidays. It specializes in maritime and general health services, offering a wide range of facilities including operating theatres, maternity wards, an oxygen plant, morgue, and emergency care. The hospital is ranked among the top ten hospitals in Ghana and actively participates in international medical tourism expos</p> <h2>Risks</h2> <ul> <li>Exposure of patient medical records, treatment histories, and personal health information</li> <li>Violation of health data protection regulations, potentially triggering mandatory breach notification requirements</li> <li>Disruption to healthcare service delivery if clinical or appointment systems were encrypted</li> <li>Medical identity theft using stolen patient records for fraudulent insurance claims</li> <li>Permanent loss of data integrity if backups were also compromised or encrypted</li> <li>Regulatory and legal consequences depending on data protection laws in the affected jurisdictions</li> </ul> <h2>What remains unknown</h2> <ul> <li>the volume and specific data types exfiltrated from the organisation</li> <li>the date of the initial intrusion and the attack vector used</li> <li>whether the organisation engaged with the attackers or paid any ransom demand</li> </ul> <h2>Conclusion</h2> <p>Ransomware attacks on healthcare organisations risk both patient privacy violations and disruption to critical medical services. The affected organisation should conduct a thorough forensic investigation, notify relevant regulatory authorities, and communicate transparently with affected stakeholders. Organisations in Ghana should review their ransomware preparedness, including offline backup verification and incident response testing.</p>