2026 Omnicell — Everest leak-site claim; ~1TB / 682,887 files (unverified)
Data compromised
Actor-claimed ~1TB across >682,887 files: healthcare/pharmacy automation software, partial source code, SQL databases/backups, credentials/certificates, firmware, deployment packages, and customer implementation records (including international partner sites per monitors) — unverified; no individual patient/customer headcount cited
Technical writeup
Unverified ransomware / leak-site claim — observed July 22–23, 2026. Everest listed Omnicell on its dark-web portal (FalconFeeds; TechNadu). Monitors describe an alleged ~1TB archive (>682,887 files) including automation software, partial source code, SQL databases, credentials, firmware, deployment packages, and customer implementation records. TechNadu states neither Omnicell nor independent researchers had confirmed the claim and that no proof dump had been made public at reporting time. Omnicell previously disclosed a separate May 2022 ransomware incident affecting patients. BreachHistory indexes recordsAffected 0 (no individual count cited) and labels the row unverified.
Root cause
Unverified Everest ransomware/extortion leak-site listing alleging intrusion and exfiltration of Omnicell data — Omnicell had not confirmed at indexing time