Krybit, the extortion gang that listed an Egyptian hospital earlier this week, has added a Guatemalan cancer treatment hospital to its leak site. Ransomware.live shows the listing for ligacancerguate.org was discovered on September 3, and RansomLook logged the same victim the same afternoon.
The domain belongs to INCAN, the Instituto de Cancerologia y Hospital Dr. Bernardo del Valle, described on the tracker victim page as Guatemala’s premier private cancer treatment center. The hospital treats patients from across Central America and runs screening and oncology programs through the Liga Contra el Cancer foundation that operates it.
The listing carries no data volume, deadline, or leak status, a common pattern for early Krybit posts, so the claim remains unverified. The gang has cycled through hospitals and clinics in recent weeks, including the Egyptian seaside facility it posted on September 1, and healthcare has become a recurring target on its roster.
For hospital security teams, the listing is a reminder that oncology centers hold high-value treatment data and that extortion groups keep probing them. Trackers recommend treating unverified claims as intelligence rather than confirmation until the gang publishes proof or the victim responds.
