Hospital Caribbean Medical Center in Puerto Rico was attacked in February 2026 in an incident claimed by a group operating as The Gentlemen, affecting roughly 92,000 people, with healthcare data reported as involved.
Ninety-two thousand is a modest figure in a year of eight-digit totals. It is also close to the entire patient population of a regional facility, which is the number that actually matters locally.
Diversion Assumes Somewhere To Divert To
Continuity planning for healthcare ransomware rests on an assumption that is invisible until it fails: that patients can be sent elsewhere. In a dense metropolitan system that assumption usually holds. In a regional or island setting it may not.
Where alternatives are limited, the pressure to restore quickly is higher, the tolerance for a long forensic hold is lower, and the negotiating position of the affected organisation is correspondingly worse. None of that appears in a record count.
It is a reason to be careful reading sector statistics. Attacks on smaller providers are systematically underweighted by totals, and systematically underweighted in coverage, without being less harmful to the people involved.
Compiled from public reporting, listed below. We have not reviewed the affected records and the access route is not established. Corrections: corrections@forensicpost.com.