The vortex ransomware group listed SimonMed on its data leak site on 2026-11-10. Country: US Sector: Healthcare Claim as published on the leak site: Type: FULL Imaging-center operations: tens of thousands of mailbox exports, patient scheduling and imaging-adjacent documents, HR, insurance and vendor files.