Ransomware Attack on Puerto Rico’s Hospital Caribbean Medical Center Exposes 92,000 Records
On June 9, 2026, Hospital Caribbean Medical Center in Fajardo, Puerto Rico, reported a data breach affecting 92,000 individuals to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights. The incident stemmed from a ransomware attack in February 2026, claimed by the The Gentlemen ransomware group.
The hospital detected the attack in early March, swiftly implementing containment measures with support from external cybersecurity experts. While systems were restored to normal operation, a forensic analysis remains ongoing to determine the full scope of the breach. Authorities were notified, and the hospital is cooperating with investigators.
On February 17, 2026, The Gentlemen listed the hospital on its data leak site, threatening to release stolen data within 10 days if ransom demands were not met. The hospital has not confirmed whether a ransom was demanded or paid, nor how the attackers gained access.
The Gentlemen: A Rising Ransomware Threat
First active in September 2025, The Gentlemen has claimed 328 attacks, with 24 confirmed, including four on healthcare providers:
- The Devereux Foundation (US, November 2025)
- Unimed Anápolis (Brazil, January 2026)
- IntraCare (New Zealand, March 2026)
The group employs double-extortion tactics, encrypting systems while stealing data to pressure victims. In 2026 alone, it has listed 254 victims, with 22 confirmed.
Healthcare Under Siege: A Growing Trend
The attack on Hospital Caribbean Medical Center ranks as the second-largest ransomware breach in healthcare this year, following Nippon Medical School Musashi Kosugi Hospital (Japan, 131,700 records) in February. Other recent incidents include:
- Signature Healthcare (US, April 2026) – Hit by Anubis, disrupting services for 10 days and allegedly stealing 2 TB of data.
- Bendigo & District Aboriginal Co-operative (Australia, April 2026) – Targeted by INC, with limited service impact.
- Minidoka Memorial Hospital (US, April 2026) – Attacked by Blackwater, disrupting medical imaging and exposing 577 GB of data.
In 2026, 27 confirmed ransomware attacks on healthcare providers have been recorded, with 122 additional unconfirmed incidents under monitoring.
Hospital Caribbean Medical Center, a 45-bed facility with four ICU beds, serves as a critical healthcare provider in Puerto Rico. The breach underscores the escalating targeting of medical institutions by ransomware groups, with significant operational and patient data risks.
Signature HealthCARE cybersecurity rating report: https://www.rankiteo.com/company/signature-healthcare
"id": "SIG1776789434",
"linkid": "signature-healthcare",
"type": "Ransomware",
"date": "2/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'customers_affected': '92,000 individuals',
'industry': 'Healthcare',
'location': 'Fajardo, Puerto Rico',
'name': 'Hospital Caribbean Medical Center',
'size': '45-bed facility, 4 ICU beds',
'type': 'Healthcare Provider'}],
'data_breach': {'data_encryption': 'Yes (ransomware encryption)',
'data_exfiltration': 'Yes (threatened by The Gentlemen)',
'number_of_records_exposed': '92,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personally identifiable '
'information, medical records)',
'type_of_data_compromised': 'Patient data'},
'date_detected': '2026-03-01',
'date_publicly_disclosed': '2026-06-09',
'description': 'Hospital Caribbean Medical Center in Fajardo, Puerto Rico, '
'reported a data breach affecting 92,000 individuals due to a '
'ransomware attack claimed by The Gentlemen ransomware group. '
'The attack was detected in early March 2026, with containment '
'measures implemented and forensic analysis ongoing. The '
'Gentlemen listed the hospital on its data leak site, '
'threatening to release stolen data if ransom demands were not '
'met.',
'impact': {'data_compromised': '92,000 records exposed',
'identity_theft_risk': 'High (patient data exposed)',
'operational_impact': 'Systems restored to normal operation, but '
'forensic analysis ongoing'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain (ransom), Data exfiltration',
'ransomware': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'ransomware_strain': 'The Gentlemen'},
'references': [{'source': 'U.S. Department of Health and Human Services (HHS) '
'Office for Civil Rights'},
{'source': 'The Gentlemen data leak site'}],
'regulatory_compliance': {'regulations_violated': 'HIPAA (likely)',
'regulatory_notifications': 'Reported to U.S. '
'Department of Health '
'and Human Services '
'(HHS) Office for Civil '
'Rights'},
'response': {'containment_measures': 'Implemented swiftly',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'remediation_measures': 'Systems restored to normal operation',
'third_party_assistance': 'External cybersecurity experts'},
'threat_actor': 'The Gentlemen',
'title': 'Ransomware Attack on Puerto Rico’s Hospital Caribbean Medical '
'Center Exposes 92,000 Records',
'type': 'Ransomware'}