Threat trackers logged a new ransomware claim against a Michigan urgent care provider on August 17. The Inc Ransom group listed Lansing Urgent Care on its dark web leak site, claiming to have stolen internal data, according to ransomware.live, which recorded the discovery date as August 17 with an estimated attack date of August 16. The group’s claim is unverified, and Lansing Urgent Care has not publicly confirmed a breach.
Lansing Urgent Care provides urgent care services for adults and children, with multiple locations in the Michigan capital region. The provider’s patient volume is not disclosed in the claim, and Inc Ransom has not published details of what data it says it took. GalaxyWarden, which tracks ransomware listings, flagged the claim as high severity but unverified.
The listing continues a stretch of ransomware activity aimed at smaller healthcare providers. Inc Ransom, which has previously hit clinics and health systems, typically pressures victims by threatening to publish stolen files. For urgent care operators, the claim is a reminder that smaller practices face the same extortion pressure as large hospitals. Providers should verify any leak-site listing quickly, assume data may have been exposed, and prepare notifications in line with HIPAA breach reporting timelines, even before a claim is confirmed.
