The Incransom extortion crew posted two U.S. healthcare targets to its leak site on October 1. One is Guardian Pharmacy LLC, a major long-term care pharmacy serving senior living and assisted living communities. The other is Northern Counties Health Care, which runs five community health centers, two dental centers and a home health and hospice division across Vermont.
The Guardian listing carried only a terse note and a promise of more detail to come, while the Northern Counties post described the network’s footprint. Neither claim has been independently confirmed, and no data volumes or deadlines were published.
Both victims sit close to the patient record. Long-term care pharmacies manage medication and insurance data for frail residents, and community health centers hold primary care and behavioral health records for thousands of people across rural reaches.
Incransom has focused on small and mid-sized healthcare and public-sector organizations, a segment that regularly appears in federal breach reporting. The familiar defenses still apply: enforced multifactor authentication, segmented networks with no flat path to records, tested offline backups, and monitoring for the credential theft and remote-access abuse that usually precede a listing.
