[ Ransomware claim · n0n · 24 Oct 2026 ]

Arthritis Center of Riverside

The ransomware group n0n named Arthritis Center of Riverside (United States) on its leak site on 24 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.

Not confirmed so farHealthcare

[ Status ]Has the attack been confirmed?

We have found no statement from Arthritis Center of Riverside and no press report of an attack so far. Until the organisation says something, treat the listing as an unproven claim, but stay alert to the phishing such claims are used for.

[ The organisation ]Who is Arthritis Center of Riverside?

What it does
Arthritis Center of Riverside is a rheumatology practice in Riverside, California, that treats conditions such as rheumatoid arthritis, lupus, scleroderma, fibromyalgia and psoriatic arthritis. Its website describes an approach based on antibiotic and nutritional therapies, an on-site laboratory, imaging, joint injections and nutritional counselling, and it runs an online shop for supplements and books.
Based in
Riverside, California, United States
Size
one office
Who it serves
Patients in the Riverside area with arthritis and other rheumatic and autoimmune conditions, including people covered by Medicare and a range of private health plans.

[ Impact ]Who could be affected

Patients could be affected if appointment, laboratory or records systems were disrupted, which could delay test results or treatment. If patient information was exposed, patients could face a higher risk of medical identity fraud and phishing that uses their health details.

In healthcare generally: Patients are the first to feel it: appointments, prescriptions and test results can be delayed, and medical and insurance records are among the most sensitive data a group can threaten to publish.

[ The attacker ]About n0n

n0n is an extortion group that security monitoring firm SOCRadar says emerged in September 2026. It is reported to gain access with credentials stolen by infostealer malware and to pressure victims by threatening to publish stolen data.

n0n has claimed 166 organisations in the last 30 days, most in United States, South Korea and Brazil, and mostly in transportation, manufacturing and healthcare. We wrote about the group in Fifty victims in a day, two hosting breaches and town halls offline.

n0n on Ransomware.live

Other organisations n0n has named

[ What to do ]If you are a customer, partner or neighbour

  1. Be cautious of calls, texts or emails about your appointments, test results or bills that you were not expecting, and phone the practice on its published number to check.
  2. Review the explanation of benefits statements from your health plan or Medicare and report any treatment you did not receive.
  3. Never give your Social Security number, insurance member number or card details to someone who contacts you unprompted claiming to be from the practice.
  4. Watch for any formal breach notification letter from the practice and follow the steps it sets out.

[ Similar claims ]Other healthcare organisations in United States