Health Dimensions Group 2025 Data Breach
Company · Healthcare consulting and management · Advisory services provider · USA
Health Dimensions Group Senior Care Management Breach (2025): ~450 Elderly Patients' Medicare, Medical & Care Records Exposed via WorldLeaks
Senior care and healthcare management consulting firm.
Confirmed · ObscureIQ Intelligence
Breach Risk Index i
86/100
Lower riskHigher risk
High and current: recent, valuable data circulating on the dark web now.
Data Sensitivity i
ElevatedExposed data raises the risk of fraud, targeting, and impersonation. Proactive steps are warranted.
450Records
2025Year
The Breach Risk Index (BRI) is a proprietary 0–100 score rating how dangerous a breach is right now, based on how recently the data has been circulating on the dark web and how valuable it is to attackers.
Crucial data exposed
Gov IDGovernment ID
PHI / MedicalMedical Diagnosis; Medical Record Number; Medication
AddressPhysical address
Breach Summary
Health Dimensions Group, a Minneapolis-based senior-care management and consulting firm, suffered a ransomware attack attributed to the WorldLeaks group, discovered November 6, 2025 (access ~October 31-November 17, 2025). A file review completed March 2, 2026 determined 450 individuals were affected. Exposed data included names, addresses, dates of birth, Medicare numbers, medical record numbers, start-of-care and certification dates, provider names/addresses, advance-directive types, diagnoses/health status, medication lists, and treatment orders/goals. (NOTE: the prior record listed ~94,084 affected and Social Security numbers; the official notification confirms only 450 individuals and lists Medicare numbers, not SSNs - corrected.)
Full threat analysis, exploitation vectors, and principal guidance below.
11 additional sections · verified field analysis · defensive doctrine
Querying breach corpus…
Cross-referencing exposed field types…
Resolving threat-actor attribution…
Compiling principal risk advisory…
450 records analyzed
About Health Dimensions Group
Health Dimensions Group (HDG) is a Minneapolis, Minnesota-based senior-living and senior-care management and consulting firm that operates and advises skilled-nursing, assisted-living, and post-acute/home-health programs. As a manager and consultant embedded in care operations, it holds resident/patient clinical, Medicare, and care-planning records alongside facility and staffing data.
Why They Hold Your Data
Healthcare consulting and management firms collect client, facility, resident, patient, staffing, and operational records across advisory, compliance, and healthcare-management workflows.
Recent Developments
HDG discovered a ransomware incident on November 6, 2025 (unauthorized access ~October 31-November 17, 2025), attributed to the WorldLeaks group. A file review completed March 2, 2026 determined the incident affected 450 individuals (including 1 Maine resident). HDG notified affected individuals and implemented additional security measures.
Data Points Exposed
8 verified field types
Date of Birth High
Full Name
Government ID Critical
Medical Diagnosis Critical
Medical Record Number High
Medication High
Physical address High
Treatment Information
Breach Impact
Although the confirmed affected population is small (about 450), the exposed data is unusually rich clinical and care-planning information for an elderly, vulnerable population, Medicare numbers, medical record numbers, diagnoses/health status, medication lists, treatment orders, and advance directives. This enables medical identity fraud, Medicare/insurance abuse, and highly targeted scams against seniors and their families, with severe privacy sensitivity per affected individual.
Exploitation & Downstream Threats
• Medicare and health-insurance fraud using Medicare numbers and care records | • Medical identity fraud using diagnoses, medications, and treatment data | • Elderly-targeted scams and coercion leveraging care status and advance directives | • Identity linkage/verification using name + DOB + Medicare number | • Doxxing and physical targeting from exposed home addresses
Principal Risk Advisory
What this means for a principal
A healthcare-linked breach: exposure ties a named individual to a provider relationship and, where clinical or insurance data is present, to conditions and treatment. For a high-profile principal this is targeting-grade, not merely identity-theft-grade: the combination lets an adversary locate, impersonate, or pressure the principal with little additional work.
What You Should Do
- Freeze credit at all three bureaus and monitor for new-account and tax-refund fraud.
- Treat the home address as exposed: review mail and package handling and physical-security routines, and brief household staff to verify unusual requests.
- Watch for medical-benefit fraud and health-themed phishing that references real provider relationships.
- Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.
How ObscureIQ Can Help
- Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
- Exposure mapping and footprint neutralization: cross-reference against broker-available data and suppress still-removable elements, prioritizing address and phone, since this record re-seeds broker networks.
- ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).
WL
Threat Actor: World LeaksConfidence: High
Motivation: Financial extortion
A leak extortion operation described as a rebrand or successor evolution of Hunters International. Reporting describes a shift toward extortion-only operations rather than encryption-first ransomware, with affiliate infrastructure and data leak pressure.
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation