The Storm ransomware crew has named a Florida provider that treats at-risk adolescents, a victim category where data theft carries consequences well beyond the usual notification costs.
Storm listed TrueCore Behavioral Solutions on September 21, according to the ransomware.live tracker. The Tampa-based organization, founded in 2001, provides residential and outpatient treatment for adjudicated youth aged 13 to 21, using strength-based and evidence-based programs. No data volume or sample files were published with the listing.
Records connected to minors are among the most sensitive categories in healthcare. Even routine clinical notes, treatment plans and family contact details can carry legal protections layered on top of HIPAA, and exposure can follow a young person for years.
Storm has been one of the more consistent threats to care providers this year. Its leak site lists hospital and health network victims including Liberty Healthcare, WindRose Health Network and Pinnacle Hospital alongside banks, manufacturers and insurers, and the crew claimed data from a rare-disease specialty pharmacy in mid-September.
Providers serving minors should assume they are attractive targets. Confirm that adolescent records are access-controlled separately from general systems, that third-party billing and telehealth vendors meet the same standard, and that any breach playbook already accounts for state laws covering minors’ mental health data.
