Sunflower Medical Group experienced a data breach when hackers accessed their systems, exposing sensitive information of nearly 221,000 patients. Compromised data includes names, addresses, Social Security numbers, and medical details. The breach occurred on December 15, was identified on January 7, and was publicized after an investigation. No operational issues were reported, but credit monitoring services were offered to the affected individuals. The Rhysida ransomware gang claimed responsibility and demanded a ransom, specifically targeting healthcare facilities.
Source: https://therecord.media/kansas-healthcare-provider-data-breach
TPRM report: https://scoringcyber.rankiteo.com/company/sunflower-medical-group
"id": "sun410031025",
"linkid": "sunflower-medical-group",
"type": "Ransomware",
"date": "3/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 221000,
'industry': 'Healthcare',
'name': 'Sunflower Medical Group',
'type': 'Healthcare'}],
'data_breach': {'number_of_records_exposed': 221000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'Social Security numbers',
'medical details']},
'date_detected': '2023-01-07',
'description': 'Sunflower Medical Group experienced a data breach when '
'hackers accessed their systems, exposing sensitive '
'information of nearly 221,000 patients. Compromised data '
'includes names, addresses, Social Security numbers, and '
'medical details. The breach occurred on December 15, was '
'identified on January 7, and was publicized after an '
'investigation. No operational issues were reported, but '
'credit monitoring services were offered to the affected '
'individuals. The Rhysida ransomware gang claimed '
'responsibility and demanded a ransom, specifically targeting '
'healthcare facilities.',
'impact': {'data_compromised': ['names',
'addresses',
'Social Security numbers',
'medical details']},
'initial_access_broker': {'high_value_targets': 'Healthcare facilities'},
'motivation': 'Financial (ransom)',
'ransomware': {'ransom_demanded': True, 'ransomware_strain': 'Rhysida'},
'response': {'communication_strategy': 'Credit monitoring services were '
'offered to the affected individuals'},
'threat_actor': 'Rhysida ransomware gang',
'title': 'Sunflower Medical Group Data Breach',
'type': 'Data Breach'}