Mexico: 3 health providers appear in ransomware
Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario appear in ransomware monitoring records.
Three private health providers in Mexico appear in specialized ransomware monitoring portals. The records for Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario place all three in the healthcare sector, but they do not provide verified details on data leaks, service disruptions or any official response.
Entries in specialized platforms
Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario appear in ransomware tracking records linked to Mexico and the health sector. In the first two cases, the information appears on ransomware.live, while the third is listed on ransomware.mx.
According to ransomware.live's ransomware victim map for Mexico, Sanoviv Medical Institute is tied to the health sector and located in Mexico, but the entry does not provide publicly verified details on how much medical data may have been compromised, whether any leaks occurred, or the specific impact on patient care.
The same source identifies Centro Médico Palafox as a healthcare provider affected by a ransomware group. Even so, the record does not say whether clinical records were exposed, medical services were disrupted for an extended period, or ransom was paid.
In Ransomware Response's ransomware monitor, Depósito Dental Universitario appears as an incident classified in the Healthcare sector in Mexico. That reference also does not say whether the clinic suspended patient care or how much of its systems were affected.
Scope still unconfirmed
Based on the material available, it is not possible to determine how much data may have been exposed, whether there was sustained operational impact, or whether the named entities issued a public response. The records reviewed identify the existence of incidents or entries associated with ransomware, but they do not document clinical impact or consequences for patients or medical staff.
The sources provided also do not contain enough information to determine whether the events are connected, whether there was any negotiation with the attackers, or whether this was a leak that followed encryption. In all three cases, the public information available on the specialized portals is limited to the victim classification and the sector in which they operate.
Sources
- Mapa de víctimas de ransomware – Méxicoransomware.live· ransomware.live
- Panorama de ransomware en México – Monitor de incidentesransomware.mx· Ransomware Response



