Ransomware Attack Hits MedImpact: Financial Data Exposed, Operations Disrupted

Last Updated: November 2, 2025By

Ransomware Strikes MedImpact

On October 27, the Russian cybercrime group Qilin declared they’ve breached MedImpact, a pharmacy benefit manager (PBM). According to their dark web post, Qilin shared screenshots of documents, including what seem to be billing invoices. Fortunately, these documents mainly contain operational financial info rather than personal data.

MedImpact confirmed the breach, stating that they are investigating with a top cybersecurity firm. They’re keeping the authorities informed about the situation. Recognizing the ransomware attack, they’ve found parts of their infrastructure non-operational. To contain the issue, MedImpact has taken their systems offline for evaluation.

The company is working hard to bring back their systems in a secure, newly designed environment. As a result, they’ve resumed pharmacy claim processes for their clients. Covering approximately 50 million patients, it remains uncertain if the breach has affected any individuals.

Fortunately, no protected health information has been disclosed by Qilin so far—only financial records. Cybernews assures there’s no evidence of specific patients’ insurance details being leaked.

Qilin’s Growing Threat in Cybersecurity

Rising to notoriety since 2022, Qilin is notorious for executing over 700 ransomware attacks in 2025 alone. Their operations are believed to be based in Russia, possibly supported by local groups.

As their list of victims grows every year, their threat hasn’t decreased. The MedImpact breach is still under thorough investigation, punctuated by reports of a 160GB data repository released on the dark web.

The rise of this group emphasizes a critical need: healthcare sectors must bolster their cybersecurity to safeguard sensitive information while ensuring service continuity.

**Stay informed on cybersecurity threats and protect your data with Qsentinel.**

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.

Get daily news in your inbox

The lastest on Hacks, ransomware attacks, post quantum security and more