In May 2026, a ransomware group named Incransom claimed to have compromised CMSWPC and exfiltrated patient medical records. Threat intelligence reports state the group threatened to release this data. This claim has been reported by security blogs and threat intelligence sites.
The alleged data exposed includes medical records and other personal and confidential information. The total number of affected individuals and specific states where they reside has not been publicly confirmed. Details regarding financial or specific personal data, such as Social Security numbers, remain unclear.
More details may emerge as investigations proceed, and official notifications may be delayed.