Heywood Hospital Breach

Executive Summary

In October 2025, Heywood Hospital (serving North Central Massachusetts) declared a "Code Black" following a severe cyberattack that forced them to divert ambulances and take critical systems offline. While the hospital initially described it broadly as a "cybersecurity incident," the Sinobi ransomware gang later claimed responsibility, boasting the theft of 550GB of data.

DataBreach.com Parse Results

Our team has analyzed the leaked files and identified the following unique identifiers, confirming the severity of the identity theft risk:

• Social Security Numbers: 92,700 (Unique)
• Phone Numbers: 55,800 (Unique)
• Email Addresses: 25,100 (Unique)

What Happened?

• The Attack: On October 12, 2025, Heywood and Athol Hospitals suffered a network outage that disrupted radiology, lab services, and email.
• The Extortion: By November 2025, the Sinobi group listed Heywood on their leak site, threatening to publish 550GB of data if a ransom was not paid.
• The Exposure: The high count of SSNs (nearly 4x the number of emails) suggests this dataset includes not just digital portal users, but potentially legacy patient records and maybe hospital staff/employment files that predate modern digital registration.