Misr Al Mahaba Hospital listed by the Nightspire ransomware group

Overview

The Nightspire ransomware group has listed Misr Al Mahaba Hospital, an Egyptian hospital, on its leak site. The listing appeared on 24 March 2025.

What was published

The group has listed the hospital as a victim but has not published detailed data descriptions at this stage. Hospitals hold patient records, medical documentation and administrative information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Patient medical data may be exposed.
• Healthcare records are sensitive and could be used for fraud.
• Employees' personal information may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Patients should monitor for unusual activity and be cautious of unsolicited communications referencing the hospital. The hospital should notify affected patients and authorities, review its systems, and follow data protection requirements for medical data breaches.