On June 24, 2025, Avantic Medical Lab was listed as a victim of a ransomware attack by the Everest group on their dark web portal. The attackers claimed to have stolen 33 GB of sensitive data, including electronic medical records (EMRs), patient histories, test results, private medical records, billing information and internal documents. The Everest group threatened to publish the stolen files within seven to eight days and released sample screenshots to demonstrate their access.
The breach is severe due to the nature and volume of data involved. Both personally identifiable information (PII) and protected health information (PHI) were seemingly exposed, including patient names, contact details, medical histories, test results, billing records and potentially other internal communications.
The attackers gained access through ransomware, encrypting Avantic Medical Lab’s systems and exfiltrating data before making their demands public on the Tor network. At this time, the total number of affected individuals has not been confirmed, but the broad range of data types and the size of the leak suggest a significant impact.
As of July 20, 2025, Avantic Medical Lab has not issued a public statement regarding the breach or provided details about their response. Given the severity of the breach and the sensitive nature of the information exposed, those who have used Avantic Medical Lab’s services should take immediate precautions.
It is recommended that affected individuals:
- Monitor their medical and financial accounts for suspicious activity
- Consider placing a fraud alert or credit freeze with major credit bureaus
- Be cautious of phishing attempts or unsolicited communications referencing their medical history or billing information
- Contact their healthcare provider for additional guidance
Staying vigilant is crucial, as the exposed data could be used for identity theft, insurance fraud or other malicious activities.
For further information about the company, visit the Avantic Medical Lab website.
