A ransomware outfit called Krybit says it broke into Singapore primary care provider ProHealth Medical Group and is threatening to dump sensitive files unless it gets paid.
Dark web claim trackers including ransomware.live and DeXpose logged the listing on August 2, 2026, naming prohealth.sg as the target. ProHealth, a private GP group founded in the 1990s, has not commented publicly or confirmed any data theft.
Krybit is not a well-known operation, and the claim remains unverified. Regional healthcare organizations should still watch for formal notices, since extortion groups sometimes name victims before a breach is confirmed.
The episode is a reminder that ransomware crews keep picking on primary care clinics, which hold sensitive medical records but rarely command the security budgets of major hospital networks. Singapore’s data protection law obligates firms to alert regulators and affected individuals when personal data is compromised.
If the claim holds, patients could be looking at exposure of medical and personal details. As of now no sample files have appeared on the group’s leak page.
