52 GB Data Leak at Morgan Records Management by Everest Group

Data Breach Overview

In January 2026, Morgan Records Management (morganrecordsmanagement.com), a U.S.-based records and medical data management company, suffered a significant data breach. A threat actor known as the Everest ransomware group publicly claimed responsibility for the attack, and a 52 GB dataset allegedly connected to the breach has been leaked.

---

Where Was the Data Found?

According to multiple security reports, the Everest group — known for publishing stolen data on dark web forums and leak sites — posted extortion notices warning of data publication if the company did not respond.

The leaked data is reportedly circulating on dark web platforms and hacker channels dedicated to ransomware disclosures. Specific details about the contents of the 52 GB leak have not yet been independently verified, but researchers believe it may include sensitive customer and operational information.

Company Data Breach History

There are no widely reported prior breaches involving Morgan Records Management in major news sources before this incident, suggesting this is the first publicly documented compromise of the organization. (Searched externally — no past reports found.)

---

Impact and Risks

Morgan Records Management handles medical records, dental records, and other sensitive healthcare documentation under strict regulatory standards (including HIPAA).

If the leaked dataset contains protected health information (PHI), personal identifiers, or other private client data, the potential risks include:

• Identity theft and fraud
• Exposure of medical or financial details
• Targeted phishing or social engineering attacks
• Reputational damage for affected clients

---

Recommendations for Users

If you or your organization have records with Morgan Records Management:
• Monitor accounts and statements for suspicious activity
• Be cautious of unsolicited contacts asking for personal details
• Watch for breach notifications from the company or regulators
• Consider credit and identity monitoring services

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.