Marlboro-Chesterfield Pathology hit by SafePay ransomware, compromises 235K patients
Learn More
Marlboro-Chesterfield Pathology, P.C. (MCP), an anatomic pathology laboratory based in Pinehurst, North Carolina, is reporting a ransomware attack that compromised sensitive personal and medical information belonging to 235,911 patients.
MCP discovered unauthorized activity on some internal IT systems on January 16, 2025, and an investigation revealed that the hackers had stolen some files. The attack disrupted the laboratory's internal IT systems. The SafePay ransomware group claimed responsibility for the attack on a darkweb post on January 25, 2025.
According to investigators, "an outside actor gained access to and exfiltrated approximately 30 GB of sensitive data." The exposed data includes:
- Names
- Addresses
- Dates of birth
- Medical treatment information
- Health insurance information (including policy numbers)
MCP informed the US Department of Health and Human Services (HHS) that the incident impacted 235,911 individuals.
MCP no longer appears to be listed on SafePay's leak website, which could indicate that a ransom has been paid. MCP stated that it took "steps, to the best of our ability and knowledge, to ensure that the data taken by the unauthorized party was deleted."
MCP began sending individual notification letters to affected patients around May 23, 2025.
