THE "Chaos" ransomware group, discovered in March 2025, targeted Healthcare Highways, a medical provider network, threatening to leak 235 GB of sensitive data if corporate representatives did not make contact within 24 hours. The leaked data included extensive protected health information (PHI) related to employee health plans, including identifiers such as Social Security numbers, birth dates, and medical details.
Key clients affected were the Leander Independent School District and John Soules Foods, both of which had confidential employee information compromised. DataBreaches confirmed the authenticity of some leaked files, which were not formatted for public readability, and noted that while some files were encrypted, decrypted versions were also present on the server. Chaos did not respond to inquiries from DataBreaches.