Insomnia is a data-extortion group stealing patient files and threatening public exposure.
Analyst brief
Insomnia is a data-theft and extortion group that emerged in October 2025, primarily targeting healthcare organizations in the United States, along with victims in Panama and the technology and manufacturing sectors. The group steals patient files and threatens public exposure rather than encrypting data, consistent with Russian-speaking cybercrime norms. Defenders should focus on detecting unauthorized access to sensitive healthcare records and watch for TTPs typical of data-extortion operations, while noting the group's avoidance of former Soviet states.
insomnia
activecrime
Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations — stealing patient files and threatening public exposure rather than encrypting files — and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.