Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Medical Department Store data breach. According to dark web monitoring sources, a hacker group calling itself dragonforce claimed responsibility for a cyberattack on Medical Department Store in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, Medical Department Store has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Medical Department Store
Medical Department Store (MDS) is a full-service provider of durable medical equipment (DME) and home medical supplies based in Southwest Florida. The company has been in operation for over 25 years and maintains store locations in Naples, Fort Myers, Port Charlotte, Venice, and Sarasota, as well as an e-commerce site at medicaldepartmentstore.com. It offers more than 8,000 items including wheelchairs, lift chairs, mobility scooters, respiratory equipment, compression garments, and mastectomy products, and provides sales, rental, and repair services. The company is accredited by The Joint Commission.
What Happened?
Medical Department Store was listed in a ransomware leak-site allegation reported by Ransomware.live. On September 11th, 2026, Ransomware.live indexed a claim by the DragonForce ransomware group naming Medical Department Store as a victim. The estimated attack date cited in the claim is September 10th, 2026. This is an attacker-side allegation only. No public statement, breach notification, or regulatory filing from Medical Department Store has been found, and no independent news reporting corroborates the claim. No specific data types, data volume, or ransom demands were disclosed in the claim.
DragonForce is a ransomware-as-a-service (RaaS) operation first observed in August 2023 that rebranded as a “ransomware cartel” in March 2025. As of August 31st, 2026, the group had publicly claimed 645 victims across 65 countries. DragonForce is known for double-extortion tactics, meaning it both encrypts victims’ systems and threatens to publish stolen data. The group operates a white-label infrastructure model called RansomBay and has been linked to LockBit 3.0 and Conti V3 ransomware variants. Its affiliates have used tools such as Cobalt Strike, Mimikatz, and SystemBC. Because DragonForce’s cartel model allows affiliates to operate under their own branding using shared infrastructure, precise attribution of the actual attacking affiliate remains uncertain.
Key Facts at a Glance
- Company or Organization: Medical Department Store
- Industry: Durable Medical Equipment (DME) / Home Medical Equipment (HME) retail and e-commerce
- Location: Southwest Florida, United States (Naples, Fort Myers, Port Charlotte, Venice, and Sarasota)
- Incident type: Ransomware claim (DragonForce) — attacker-side allegation only
- Date of breach: September 10th, 2026 (estimated, per attacker claim)
- Source: Ransomware.live — Medical Department Store (DragonForce); Proven Data — DragonForce Ransomware Profile; Group-IB — DragonForce Ransomware Group; Halcyon — DragonForce Threat Group Profile; hendryadrian.com — Ransom! Medical Department Store (Sep-2026)
What Should You Do?
If you are a customer of Medical Department Store, it is a good idea to stay alert for any signs of fraud or unusual account activity, even while the facts of this incident remain unconfirmed. You can place a free fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. You can also request a free copy of your credit report at AnnualCreditReport.com to check for unfamiliar activity. If any of your personal information is misused, you can report it and get a personalized recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
