Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

AngMar Companies

angmarcompanies.com
Group Interlock
Discovered 2026-08-11 15:24 UTC
Est. attack date 2026-08-11
Sector
Not Found

Description:

AngMar is a private organization comprised of numerous corporate holdings, LLCs, and companies, operating a network of home health care facilities. They disregard the safety of their clients and the people they care for. As a result, 710 GB of confidential information about the companies they serve has been exposed. Most importantly, patient data has been leaked, including their medical records, medical histories, personal information such as Social Security numbers, home addresses and phone numbers, and much more.
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 1

External Attack Surface: 0

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • angmarcompanies-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 include:spf.protection.outlook.com include:spf-us.emailsignatures365.com -all
  • apple-domain-verification=6o3nu5PYrLh2rP97
  • e25fb92a428d848a369dfc082f5c26198c2c2329aadef504ea0aa2d764fd121d
  • citrix-verification-code=24aef738-6dd6-4837-ab40-a06a23fb0f59
  • MS=ms26325905
  • amazon-business-verification=76c3dca54759384cc5f4959979ec8f34bee44410588818f90ce8f34a988553c8
  • google-site-verification=l-xJSrkeZDGoKdSnp71UXvng16ANfDE0MCmCmiVJf9w
  • v=spf1 include:emailus.freshservice.com include:spf.protection.outlook.com include:email.freshservice.com -all
  • 59169A2557BB6368CD04B67FBEBB297BAF1CB75D0992C539CF05343C79DF8E31
  • include:spf-us.emailsignatures365.com
  • google-site-verification=TpG26gr4pJyTrlA11tD7eSw-rRoi8W14k3TUK7ezmdE
  • duo_sso_verification=xZ4OeP0vk1E5i0nIZ76FdklJqnDHVWJY6XbiH88SlMSBeOPLtel2aSNGODX4WQmG
  • 50625f886bca12e88b866bac6b141f4d0e513ed0261db59129
Cloud / SaaS Services Detected
Apple Cisco Duo Microsoft 365

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.