2026 Woundtech — mobile wound care breach (FulcrumSec claims 160K+ patients)
Data compromised
PHI, SSNs, clinical notes, medical images, insurance info
Technical writeup
Wound Technology Network (Woundtech), a Florida-based mobile wound care provider, detected unusual activity December 6, 2025. Unauthorized party copied data December 6-9, 2025. Review completed March 2, 2026; disclosed March 16, 2026. At least 3,809 Texas residents confirmed; threat actor FulcrumSec claimed 3.8 TB and 160,000+ patients with 4.6M clinical notes and ~93K wound images. Exposed: names, DOB, phones, gender, limited SSNs, clinical notes, diagnoses, treatment, insurance, wound images. FulcrumSec claimed responsibility February 1, 2026.
Root cause
Unauthorized network access; data exfiltration