The Gunra ransomware group escalated its attack on American Hospital Dubai (AHD) by leaking 40 terabytes of sensitive data, including personal demographics, credit card details, Emirates ID numbers, health records, and internal documents. The group initially claimed to have exfiltrated 450 million patient records, totaling 4 terabytes of uncompressed data. The leaked data includes financial records, payroll details, and sensitive patient information, posing risks of identity theft and fraud. The hospital has yet to issue an official statement, raising concerns about transparency and compliance with UAE’s strict cybersecurity laws.
Source: https://cybersecuritynews.com/gunra-ransomware-group-leaks/
TPRM report: https://scoringcyber.rankiteo.com/company/american-hospital-dubai
"id": "ame300061725",
"linkid": "american-hospital-dubai",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Dubai, UAE',
'name': 'American Hospital Dubai',
'size': '254-bed facility',
'type': 'Healthcare facility'}],
'attack_vector': 'Double-extortion tactics',
'data_breach': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'number_of_records_exposed': ['40 terabytes of data',
'450 million patient records'],
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal demographics',
'Credit card details',
'Emirates ID numbers',
'Health records',
'Internal documents',
'Financial records',
'Payroll details',
'Sensitive patient information']},
'date_detected': '2025-06-04',
'date_publicly_disclosed': '2025-06-16',
'description': 'The Gunra ransomware group escalated its attack on American '
'Hospital Dubai (AHD) by releasing new evidence of a major '
'cyberattack, claiming to have leaked 40 terabytes of '
'sensitive data including personal demographics, credit card '
'details, Emirates ID numbers, health records, and internal '
'documents.',
'impact': {'brand_reputation_impact': 'Intensified scrutiny and concerns '
'about transparency',
'data_compromised': ['Personal demographics',
'Credit card details',
'Emirates ID numbers',
'Health records',
'Internal documents',
'Financial records',
'Payroll details',
'Sensitive patient information'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': ['Virtual machines', 'Storage systems']},
'investigation_status': 'Authorities investigating the breach’s scope',
'lessons_learned': 'The urgent need for robust cybersecurity measures and '
'transparent communication to protect patient trust and '
'safety.',
'motivation': 'Ransom',
'ransomware': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'ransomware_strain': 'Gunra'},
'recommendations': 'Automate threat response with ANY.RUN’s TI Feeds—Enrich '
'alerts and block malicious IPs across all endpoints.',
'references': [{'date_accessed': '2025-06-16',
'source': 'Twitter',
'url': 'https://t.co/YvW25olKl0'}],
'threat_actor': 'Gunra ransomware group',
'title': 'Gunra Ransomware Attack on American Hospital Dubai',
'type': 'Ransomware'}