PULSE
ES
FEED
ransomemperador reclama a SiteProRentals · Hospitalityransomemperador reclama a Electrolux 2... · SE · Manufacturingransompanzer reclama a SMCare · Healthcareransomincransom reclama a AHEAD · US · Not Foundransomincransom reclama a nsbsd.org · US · Government & Defenseransompanzer reclama a Asesoría FAR · Professional Servicesransompanzer reclama a Ressources Si · FR · Professional Servicesransomstorm reclama a First Secure Bank Group · US · Financial Servicesransomqilin reclama a XICO · MX · Not Foundransomqilin reclama a Island · CA · Technologyransomqilin reclama a Revenga Smart Solutions · ES · Technologyransomqilin reclama a Willatt & Flickinger · US · Not Foundransomarcusmedia reclama a Pantaneiro Capas · BR · Manufacturingransomemperador reclama a Car Service Abschlepp · DE · Transportationransomemperador reclama a SiteProRentals · Hospitalityransomemperador reclama a Electrolux 2... · SE · Manufacturingransompanzer reclama a SMCare · Healthcareransomincransom reclama a AHEAD · US · Not Foundransomincransom reclama a nsbsd.org · US · Government & Defenseransompanzer reclama a Asesoría FAR · Professional Servicesransompanzer reclama a Ressources Si · FR · Professional Servicesransomstorm reclama a First Secure Bank Group · US · Financial Servicesransomqilin reclama a XICO · MX · Not Foundransomqilin reclama a Island · CA · Technologyransomqilin reclama a Revenga Smart Solutions · ES · Technologyransomqilin reclama a Willatt & Flickinger · US · Not Foundransomarcusmedia reclama a Pantaneiro Capas · BR · Manufacturingransomemperador reclama a Car Service Abschlepp · DE · Transportation
Ransomware · Claim14 August 2026 · 05:59 UTC
CLAIMclaimed bySHINYHUNTERS

Baxter International, Inc.

baxter.com

CountryUSUnited States
SectorHealthcare
View group profile →
Key factsRECORD
Ransom amountNot disclosed
Data size exfiltratedNot disclosed
Screenshot on leak siteNo
Press mentioned by groupNo
Associated infostealer141 employees · 139 users · 123 third-parties · Acreed, Azorult, CRYPTBOT
Description

Over 7.1M Salesforce records containing some PII was compromised. This is a final warning to reach out by 17 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK

Other victims from group · ±48h4
AgoVictimCountrySectorSizeCap.
45d
Metabasemetabase.com
USTechnology—○United States45d
Sharecare, Inc.sharecare.com
USHealthcare—○United States45d
Carhartt, Inc.carhartt.com
USRetail & E-Commerce—○United States45d
Cook Medical LLCcookmedical.com
USHealthcare—○United States