Physicians' Clinic of Iowa (PCI), a healthcare provider in Iowa, reportedly experienced a cyberattack on February 26, 2026, by threat actor Anubis, who allegedly exfiltrated sensitive data. This incident has not been officially confirmed by PCI, and information available is based on emerging ransomware claims.
The alleged breach may have involved personal identifiers and protected health information (PHI), based on images published by Anubis on Ransomware.Live. The exact number of affected individuals remains unclear, though reports indicate current and former patients may be impacted. Specific details such as SSN or financial data exposure have not been confirmed by PCI.
Preliminary information suggests that while attorneys are investigating potential class-action lawsuits, no official confirmation, regulatory filings, or breach notification letters have been reported by PCI. Further details may emerge as investigations continue, and it is important to note that official notifications to individuals may be delayed.