2026 Decatur Diagnostic Laboratory — LockBit 5.0 leak-site claim (unverified); Alabama lab
Data compromised
Actor threatened full leak of patient/lab data; no attested field list or victim count—healthcare lab context implies names, DOB, addresses, insurance IDs, lab results, and billing-class PHI may be at risk if claim is accurate
Technical writeup
Unverified LockBit 5.0 leak-site claim — indexed April 14, 2026. Ransomware.live and threat-intelligence monitoring (DeXpose) documented LockBit 5.0 listing Decatur Diagnostic Laboratory (decaturdiagnosticlab.net), a privately owned outpatient lab at 2828 Hwy 31 South inside the Med-Surg Complex in Decatur, Morgan County, Alabama. The actor stated the full leak would be published unless the lab contacted them to negotiate. Decatur Diagnostic Laboratory had not issued a public breach statement and no HHS Office for Civil Rights filing had appeared in indexed trade and legal summaries at catalog time. BreachHistory labels the incident unverified pending company or regulator attestation; recordsAffected remains 0 until a victim count is cited. Alabama patients who used the lab for blood work, drug screening, respiratory panels, or other diagnostics should treat the claim as a reason to monitor Explanation of Benefits and credit activity—not as confirmation their records were stolen.
Root cause
Unverified LockBit 5.0 ransomware listing for Decatur Diagnostic Laboratory (decaturdiagnosticlab.net)—privately owned lab in Med-Surg Complex, Decatur, Alabama; company had not confirmed at catalog time