ShinyHunters threatens to leak 8.8 terabytes of data allegedly stolen from Amazon's One Medical

One of the internet’s most prolific data extortion groups, ShinyHunters, said it has stolen more than 8.8 terabytes of information from One Medical, the primary care provider owned by Amazon, and is threatening to release the files if the company does not begin negotiations by June 22.

The group posted the claim on its dark web leak site, where it issued what it called a final warning to One Medical. The post did not include samples of the alleged stolen data, leaving the specific contents of the claimed breach unconfirmed.

One Medical operates more than 250 clinics spanning 19 major U.S. cities and provides both virtual and in-person primary care to upward of 830,000 patients under a membership model. Amazon acquired the company in 2023 in a deal valued at roughly $3.9 billion, folding it into the retail giant’s expanding health care operations.

Because of the nature of One Medical’s services, any compromised data could include medical records along with personally identifiable patient information. Security researchers note that the combination of medical details and personal data is particularly valuable to criminals, who can use it for identity theft, targeted phishing schemes and social engineering attacks.

Cybernews said it had contacted One Medical for comment and would update its reporting once the company responds.

ShinyHunters has built a reputation for breaching prominent organizations and threatening to publish stolen files rather than encrypting systems for ransom, a tactic that distinguishes it from many other cybercriminal groups. The gang’s leak site has recently listed companies including JCPenney, Kodak, BCD Travel, Infinite Campus and Sysco.

This year alone, the group has claimed responsibility for breaching Dutch telecom provider Odido and the European Commission. It has also been tied to past attacks on networking giant Cisco Systems, Rockstar Games, the studio behind the Grand Theft Auto franchise, and investment advisory firms Mercer Advisors and Beacon Pointe Advisors.