In October 2026, the Akira ransomware group claimed responsibility for an attack on Annapath Pathology Services, listing the organization on its dark web leak site. Annapath is a Maryland-based surgical and cytopathology laboratory specializing in dermatopathology. As of late October 2026, the company has not publicly confirmed an unauthorized intrusion, and no regulatory filings have been submitted.
The specific types of data allegedly involved and the number of individuals affected remain unconfirmed. Although pathology laboratories typically handle patient records, clinician orders, and employee information, neither Annapath nor external investigators have confirmed that any protected health information or personal data was compromised or exfiltrated.
Information regarding ransomware leak site postings is subject to change as investigations proceed. Details about the scope of an incident or formal breach notifications often emerge weeks or months after an initial threat actor claim.