The notorious ransomware group claimed to have stolen approximately 710 gigabytes of data from AngMar Management Services.

 

What happened

According to a data breach notice to the Attorney General of Massachusetts, AngMar Management Services (AMS), a Texas-based home health and hospice management company, experienced a data breach in the summer of 2026.

The notice, which is dated September 22nd, 2026, shared that AMS discovered unusual activity on their network on July 20th, 2026. Through an investigation, their IT team discovered AMS’ computer environment had been accessed by an unauthorized actor on or around July 18th. AMS determined the following data had been impacted for some patients that may be connected to their systems: name, date of birth, Social Security number, patient ID, health insurance information, health and medical information, and other information related to health services. The organization reported the data breach to the Department of Health and Human Services, stating that 126,196 individuals were impacted.

 

Going deeper

According to Ransomware Live, which tracks ransomware groups and their attacks, reported that the Interlock ransomware group has claimed the attack. The malicious group, which is believed to be based somewhere in North America or Europe, has attacked approximately 129 victims since they were first discovered in late 2024. While they’ve had victims from all over the world, according to the American Hospital Association, this year they’ve targeted organizations in the Americas approximately 84% of the time.

In their attack on AMS, Interlock claimed the company “disregard[s] the safety of their clients and the people they care for. As a result 710 GB of confidential information about the companies they serve has been exposed.” The note implies that AMS did not pay a ransom, something most organizations decide against with assistance from the FBI or other law enforcement agencies.

 

In the know

Interlock has claimed attacks against multiple healthcare organizations, with their most recent breach discovered at the end of September. In 2025, the group claimed a major attack against DaVita, a kidney dialysis and treatment company, that resulted in the healthcare practice incurring approximately $13.5 million in expenses. The group also conducted a major attack on Kettering Health, which runs medical centers and clinics in Florida. Aside from stolen data, including financial records, the attack on Kettering led to an outage that lasted weeks and forced canceled appointments and procedures.

 

Big picture

For AMS, investigating the breach is just the beginning of the recovery process. Now that notices have been sent to victims, the company will be closer to seeing the impact the breach has on patient trust and AMS’ financial wellbeing. Since AMS is a business associate for home health and hospice organizations, it’s possible that these organizations may no longer partner with AMS. AMS will have to work hard to improve their security practices and prove to their healthcare partners that the data entrusted to them is safe. Outside of the potential loss of business partners, AMS is also likely to face a class action lawsuit. With healthcare data breaches costing an average of $7.42 million, AMS may have a long road ahead to recovering financially and operationally.

 

FAQs

Is it verified that Interlock stole the data?

Interlock posted a screenshot of folders they claim comes from the data breach against AMS. The organization claims the data is posted on the dark web, which implies that AMS did not engage with negotiations or that negotiations failed. While it’s difficult to know if Interlock truly has data from AMS, it’s reasonable to assume that they were the perpetrators.

 

Can data be deleted from the dark web?

No, or at least not reliably. Once something is posted on the dark web, it becomes virtually impossible to track who may have it.

 

How likely is it that AMS will face a lawsuit?

It’s very likely; most data breaches result in a class action lawsuit. However, since financial information wasn’t involved, it may be at the lower end. If a suit is filed, then more information will come to light through the investigation, which could impact a final settlement if one is reached.