The Storm ransomware group has posted Pinnacle Hospital on its leak site, claiming data stolen from the physician-owned acute care facility in Crown Point, Indiana.
Pinnacle Healthcare, the hospital’s operator, runs an 18-bed acute care hospital and a network of more than 150 physicians and medical specialists across family medicine, internal medicine, gastroenterology, general surgery, gynecology, orthopedics, pain management, urology, and breast care, according to the company profile carried by threat trackers. Ransomware.live shows the listing went up August 23 with an estimated intrusion date of August 21.
The claim is unconfirmed, and neither the hospital nor its operator has issued a public notice. Storm has been one of the most prolific healthcare-targeting gangs of the summer, with claims against an Indiana health network, a Lexington equine hospital, the Canadian Mental Health Association, and three US healthcare organizations in a single day in August.
Small community hospitals are attractive targets because they maintain full electronic health records but frequently rely on limited IT staff. For facilities of this size, the practical defenses are segmentation of imaging and lab systems, offline backups tested monthly, and rapid credential rotation after any suspected phishing.
GalaxyWarden’s breach index independently logged the Pinnacle Hospital listing with a high severity rating the same day, giving researchers two separate trackers confirming the claim.
