If threat actors gave you a chance to redact the patient data they hacked before they leak it, would you take them up on the offer? Read about the Woundtech incident.

# Executive summary On or about December 6–9, 2025 FulcrumSec gained unauthorized access to Woundtech, exfiltrating a portion (~335 GB) of a larger 6.7 TB dataset that included full Snowflake table exports (clinical notes, ~928,073 unique patient IDs) and S3-hosted files (~178,886 files of wound photos and PDFs); samples and detailed analyses were posted publicly, FulcrumSec negotiated with Woundtech (including unusual offers to let the company redact or to delete individual records on request), and Woundtech notified regulators and patients months later while offering credit monitoring services.