The Storm ransomware gang has listed Rood & Riddle Equine Hospital in Lexington, Kentucky, on its leak site, claiming it stole internal data, according to ransomware trackers.
Ransomware.live recorded the posting on August 14, 2026, with an estimated attack date of August 11. GalaxyWarden’s breach log carries the same listing, describing the claim as the group’s assertion that internal data was taken. The hospital has not confirmed or denied the claim publicly.
Rood & Riddle, headquartered on Georgetown Road in Lexington, is one of the largest equine hospitals in the world, employing between 200 and 500 people. Veterinary hospitals hold client contact details, billing records, and animal medical histories, which makes them recurring targets for extortion groups even though animal records sit outside HIPAA’s notification framework.
Storm has been one of the most active healthcare-targeting gangs this month, claiming the Canadian Mental Health Association and three US healthcare organizations in earlier waves.
For CISOs in veterinary and animal health, the listing is a warning that ransomware risk carries the same weight as in human healthcare: client trust, billing continuity, and reputational exposure all ride on the outcome. Providers should confirm their backup and detection controls before a gang makes the decision for them.
