Mexico: 3 health providers appear in ransomware
Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario appear in ransomware monitoring records.
Three private health providers in Mexico appear in specialized ransomware monitoring portals. The records for Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario place all three in the healthcare sector, but they do not provide verified details on data leaks, service disruptions or any official response.
Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario appear in ransomware records tied to Mexico and the healthcare sector, according to ransomware.live and ransomware.mx. The first two are listed on ransomware.live, while the third appears on ransomware.mx. None of the entries includes publicly verified details on compromised data, clinical impact or service outages.
What do the records show about these three entities?
Sanoviv Medical Institute appears on ransomware.live's Mexico victim map as a healthcare-related entity based in Mexico. The entry does not provide publicly verified details on the amount of medical data compromised, any possible leak or the concrete impact on patient care.
The same source lists Centro Médico Palafox as a healthcare provider affected by a ransomware group. The record does not say whether there was a leak of medical records, a prolonged disruption of services or a ransom payment.
In Ransomware Response's ransomware monitor, Depósito Dental Universitario appears as an incident classified in the Healthcare sector in Mexico. That reference also does not say whether the clinic suspended patient care or how many systems were affected.
What scope can be confirmed from the available information?
Based on the material available, it is not possible to determine how much data may have been exposed, whether there was a sustained operational impact, or whether the named entities issued a public response. The records reviewed show the existence of incidents or entries linked to ransomware, but they do not document the clinical impact or the consequences for patients or medical staff.
There is also nothing in the sources provided to establish whether the events are connected, whether there was negotiation with the attackers or whether the case involved a leak after encryption. In all three instances, the public information available on the specialized portals is limited to the victim classification and the sector in which they operate.
Sources
- Mapa de víctimas de ransomware – Méxicoransomware.live· ransomware.live
- Panorama de ransomware en México – Monitor de incidentesransomware.mx· Ransomware Response



