Ransomware needs a way in. Stolen credentials are the cheapest one.

Topcon Healthcare Ransomware Attack

Ransomware victimRansomed

everestGroup

—Country

Oct 12, 2026Discovered

Overview

View group profile

Industry

Healthcare

Discovered

about 13 hours ago

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

everest

Total victims

154

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

103

Threat level

3.9/10

Aggressiveness10/10

Lethality0/10

Criticality1.1/10

Status breakdown

Data Leaked0.6%1

Claimed

this victim

99.4%153

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Healthcare

Known target sector

Other victims

View all (154)

Same group · everest

Topcon Healthcare
—
Claimed
KVH
—
Claimed
Laerdal
—
Claimed
Kennametal
United States
Claimed
Flydubai
United Arab Emirates
Claimed
B-accountants
Netherlands
Claimed

Group activity

Monthly attacks · everest

154

total · avg 11.8/mo