Mid-South Pulmonary & Sleep Specialists, P.C., a pulmonary, critical care, and sleep medicine practice based in Memphis, Tennessee, was named on November 28, 2025 as a victim of the Anubis ransomware operation. Anubis posted the practice on its dark-web leak site, identifying the incident as a patient data breach. The breach surfaced publicly through dark-web monitoring services in mid-February 2026, with class-action investigations by U.S. plaintiff law firms organizing shortly after.

The breach affected approximately 43,000 individuals based on records indexed by breach-tracking services. Compromised fields included names, phone numbers, and Social Security numbers. As a pulmonary, sleep medicine, and critical care practice, the underlying records exfiltrated by the attackers also include patient identity, insurance, billing, sleep-study results, pulmonary-function test data, intensive-care discharge summaries, and respiratory-condition diagnoses typical of a specialty pulmonary operation, beyond the more limited field set surfaced publicly.

For affected patients, the practical risk profile combines identity-fraud exposure with respiratory-care-specific risks. The combination of name and Social Security number is a strong base for synthetic identity fraud and fraudulent credit applications. Inclusion in the dataset confirms a pulmonary, sleep, or critical-care relationship and may reference specific diagnoses such as sleep apnea, COPD, or pulmonary hypertension, which can support medical-themed phishing referencing real treatments or insurance claims. Patients with sleep apnea diagnoses face additional risk concerning commercial driver's license and FAA medical certification status. Patients who received intensive care services at Methodist Healthcare, Baptist East, or St. Francis hospitals through Mid-South Pulmonary intensivists may have their ICU care histories included in the affected records. Affected individuals should freeze credit at all three U.S. bureaus, monitor health-insurance statements, and treat unsolicited contact referencing Mid-South Pulmonary, related hospitals, or pulmonary care with caution.

Pulmonary and sleep-medicine practices collect patient identity, contact, insurance, billing, appointment, and treatment records across specialty care operations.

Mid-South Pulmonary & Sleep Specialists was named on November 28, 2025 as a victim of the Anubis ransomware operation, which posted the practice on its dark-web leak site identifying the breach as a patient data incident. The breach surfaced publicly through dark-web monitoring services in mid-February 2026. The practice has not publicly detailed the incident as of this writing, and U.S. plaintiff law firms began organizing class-action investigations in late February 2026. Anubis has been active in the U.S. healthcare sector throughout 2025, with confirmed victims also including AllerVie Health.