The Brain Cipher extortion group has posted a US perfusion services company on its dark web leak site, according to ransomware trackers that recorded the listing on August 31, 2026.
CCS Perfusion supplies clinical perfusionists who operate heart-lung bypass machines during open-heart surgery, managing circulation and oxygenation for patients inside hospitals and surgical centers. A breach at such a firm could expose staffing records, credentialing and licensing documents, and scheduling data tied to cardiac surgery programs at multiple facilities.
The listing arrived in a burst of new posts by Brain Cipher the same evening, most of them outside healthcare. It includes no proof-of-theft files or volume figure, and the company has not commented publicly, so the claim is unconfirmed.
Perfusion vendors sit in the clinical supply chain where one compromise can ripple across the hospitals that contract them. Healthcare security leaders should treat claims against clinical staffing partners as a trigger to review third-party access and incident response agreements.
