2026 SaludTools — unverified Kazu extortion; 2.3 TB / ~4.6M EMR files claimed (Colombia)
Data compromised
Actor-claimed ~2.3 TB / ~4.6 million files: expected PHI including patient identities, clinical records, appointments, telemedicine, billing and insurance—SaludTools has not confirmed
Technical writeup
Unverified extortion claim — June 2026. Kazu actor extorting SaludTools (saludtools.com), a Colombian cloud EMR/EHR platform, claiming ~2.3 TB and ~4.6 million files stolen with $400,000 ransom and July 7, 2026 deadline. Expected categories include clinical documentation, telemedicine histories, and billing/insurance data. Part of Kazu's Latin American healthcare campaign alongside Meducar and ConsultorioMovil. SaludTools has not publicly confirmed. BreachHistory indexes recordsAffected 0 pending attested patient counts.
Root cause
Threat actor Kazu claims exfiltration from SaludTools Colombian EMR/EHR platform; $400,000 ransom, July 7, 2026 deadline—unverified