On September 10, 2026, RansomLook recorded a post identifying mankatoclinic.com as a victim associated with the Chaos group. A separate report cited by ClassAction.org said Chaos claimed to have exfiltrated 610 gigabytes of data from Mankato Clinic in an attack estimated to have occurred that day. Mankato Clinic has not publicly confirmed the incident in the sources reviewed.
The affected individual count and specific data types remain unknown. The available reports do not establish whether Social Security numbers, medical information, or financial information were involved. No official regulator filing or consumer notification was identified in the sources reviewed.
The available information reflects an unconfirmed report as of September 13, 2026. Further details about the scope of the incident, affected individuals, and compromised information may emerge later.