On March 7, 2026, the Genesis ransomware group publicly listed Sierra Management Group, a medical practice management provider, as a victim. This information was discovered through Ransomware.live. No official statements from Sierra Management Group have been found regarding this incident.
As of now, the specific types of data exposed, the exact number of affected individuals, and the states impacted have not been publicly disclosed. It is also unclear if this was a vendor-related breach. While medical practice management firms often handle protected health information, this is not explicitly confirmed by the available sources.
Details surrounding this recent incident may emerge as investigations progress, and official notifications, if any, could be delayed.