Overnight, Coös County Family Health Services confirmed 40,185 people had had their data breached following a cyber attack in July 2025. Ransomware group Run Some Wares claimed the attack in August. Coös County previously suffered a ransomware attack in September 2021.
In its notification, Coös County states that:
On July 9, 2025, Coos County became aware of suspicious activity related to its phone systems and servers. Coos County began an investigation to determine the nature and scope of the activity and took steps to secure its systems. The investigation determined that there was unauthorized access to the servers on July 9, 2025, during which an unauthorized party may have viewed or copied data.
The data impacted includes:
- Names
- Dates of birth
- Contact information
- Social Security numbers
- Medical identification numbers and medical information
Coös County hasn’t confirmed the nature of its attack, nor has it confirmed or denied Run Some Wares claim. Comparitech did contact Coös County for more information but has yet to receive a response. It is offering those affected free access to credit monitoring services for twelve (12) months through TransUnion.
Who is Run Some Wares?
Run Some Wares first started adding victims to its data leak site in February 2025. Since then, it has claimed six attacks—two of which have been confirmed.
As well as this attack on Coös County, French fintech company Harvest was hit by an attack in February 2025. The organization’s website and services were brought down and, at first, it was thought that no data had been impacted. However, following a claim from Run Some Wares, Harvest confirmed that some employee emails had been accessed, meaning client data could have been breached.
These two confirmed attacks demonstrate how Run Some Wares operates like many of today’s gangs by focusing on the encryption of systems and theft of data.
Ransomware attacks on the US healthcare sector
So far this year, we’ve seen 63 confirmed attacks on US healthcare providers. To date, these attacks have seen subsequent data breaches of just over 6.2 million records.
Last month, a number of other large data breaches were confirmed, including:
- Medical Associates of Brevard, LLC – 246,711 records breached following an attack in January 2025, which was claimed by BianLian
- Huron Regional Medical Center, Inc. – 25,398 records breached following an attack in May 2025, which was claimed by Beast
- Goshen Medical Center – 456,385 records breached following an attack in February 2025, which was also claimed by BianLian
As we have seen with this attack on Coös County, ransomware often has a huge impact on healthcare companies, both in the downtime caused by system encryption and in the amount of data that’s breached.
We are also tracking 142 unconfirmed attacks from this year so far.
About Coös County Family Health Services
Headquartered in Berlin, New Hampshire, CCFHS is a community-based organization offering health care and social services at its six clinics.
