Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Arizona Vascular Medical Equipment, Inc data breach. According to dark web monitoring sources, a hacker group calling itself dragonforce claimed responsibility for a cyberattack on Arizona Vascular Medical Equipment, Inc in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, Arizona Vascular Medical Equipment, Inc has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Arizona Vascular Medical Equipment, Inc
Arizona Vascular Medical Equipment, Inc. is a durable medical equipment provider headquartered in Mesa, Arizona, specializing in compression therapy solutions and vascular care equipment. According to its BBB profile, the company has been in business since 2001 and offers sales of external compression durable medical equipment for cardiovascular issues. Its products include Lympha Press compression pumps, Art Assist devices, and compression stockings used to manage conditions such as lymphedema, chronic venous insufficiency, and lipedema. The company works with doctors and therapists and serves patients across the Phoenix metro area, with locations in Mesa and Glendale.
What Happened?
On September 24th, 2026, the DragonForce ransomware group listed Arizona Vascular Medical Equipment, Inc. on its dark web leak site, as tracked by Ransomware.live. This is an attacker-side allegation only. No public confirmation from the organization, no regulatory filing, and no independent corroborating source specific to this incident has been found. CTIWatch, a threat-intelligence aggregator, separately lists Arizona Vascular Medical Equipment, Inc. as a DragonForce claim from September 2026, though that listing also draws from Ransomware.live rather than an independent source. The specific data types allegedly involved and the claimed size of any exfiltration have not been reported. The exact scope of any potential exposure remains unknown.
DragonForce is a well-documented ransomware-as-a-service (RaaS) operation first observed in August 2023 that rebranded as a “ransomware cartel” in 2025. The group is known for double-extortion tactics — combining data exfiltration with encryption — and operates using payloads based on leaked LockBit 3.0 and Conti source code. As of late August 2026, DragonForce had publicly claimed over 645 victims across 65 countries, with healthcare ranking among its top five targeted sectors. The group drew significant attention for high-profile attacks on UK retailers including Marks & Spencer, Co-op, and Harrods.
Key Facts at a Glance
- Company or Organization: Arizona Vascular Medical Equipment, Inc.
- Industry: Healthcare / Durable Medical Equipment & Medical Supplies
- Location: Mesa, Arizona
- Incident type: Ransomware claim (dark web allegation, unconfirmed by organization)
- Claim first observed: September 24th, 2026
- Source: Ransomware.live DragonForce claim · CTIWatch victim listing · BBB Business Profile · Proven Data – DragonForce profile
What Should You Do?
If you believe your information may have been exposed, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitoring your accounts and credit reports closely for unfamiliar activity. You can request free annual credit reports at AnnualCreditReport.com. If any of your information was misused, report it at IdentityTheft.gov, which provides step-by-step recovery guidance. Because Arizona Vascular Medical Equipment, Inc. works with patients managing medical conditions, it is worth reviewing any Explanation of Benefits statements and medical records for unexpected entries, and contacting your health insurer if you spot services you did not receive.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
