INC RANSOM claims compromise of mental health data at Clinica Family Health & Wellness
Learn More
Clinica Family Health & Wellness, a community health center serving vulnerable populations in Colorado, was hit by a ransomware attack on March 14, 2025.
The incident affected the Mental Health Partners system. Apparently, this integration created additional complexity for the organization's cybersecurity infrastructure and may have contributed to vulnerabilities that enabled the successful attack. Clinica Family Health Services claims that other systems are not affected.
The INC RANSOM gang claimed responsibility for the attack. The attackers encrypted the system and claim to have exfiltrated sensitive data, posting sample screenshots on their dark web portal as proof of the successful breach.
The claimed stolen data includes:
- Personally identifiable information (PII)
- Protected health information (PHI)
- Mental health records and treatment information
- Patient demographic details
- Health insurance information
- Clinical and medical data
The number of affected individuals is not disclosed.
Clinica Family Health & Wellness confirmed the incident and engaged external cybersecurity professionals to assist with the forensic investigation and recovery efforts. The healthcare provider has committed to notifying all known affected individuals as quickly as possible.
