2026 ConsultorioMovil — unverified Kazu extortion; 1.73 TB / 2M+ files (Grupo Cormos Argentina)
Data compromised
Actor-claimed 1.73 TB dataset of 2M+ files expected to include EMR, prescriptions, telemedicine communications—company has not confirmed
Technical writeup
Unverified extortion claim — June 2026. Kazu actor extorting ConsultorioMovil (consultoriomovil.net), a Grupo Cormos Argentine telemedicine platform, claiming 1.73 TB and 2M+ files with $200,000 ransom and July 7, 2026 deadline. Expected PHI categories include clinical records and doctor-patient communications. Related to meducar-kazu-extortion2026 under the same parent group. ConsultorioMovil has not publicly confirmed. BreachHistory indexes recordsAffected 0.
Root cause
Threat actor Kazu claims exfiltration from ConsultorioMovil telemedicine/EMR (Grupo Cormos); $200,000 ransom, July 7, 2026 deadline—unverified