Meddi Laboratório

Meddi Laboratório is a diagnostic laboratory headquartered in Brazil. The organization provides clinical laboratory testing services to patients and healthcare providers. Its core activities include receiving biological specimens, performing analytical tests, and issuing diagnostic reports. In the course of its operations, Meddi Laboratório handles personal identification documents, professional certifications, and payment‑related information. The laboratory serves clients in Brazil, supporting diagnostic workflows within the national healthcare system. As a private diagnostic facility, it operates under the regulatory framework that governs clinical laboratories in the country.

In February 2021, Meddi Laboratório experienced a ransomware attack carried out by the Avaddon threat actor group. The attackers exfiltrated a range of sensitive data, including certifications, personal identification documents, contact details, and payment information. A sample of the stolen data was published online as proof of the breach. The ransom note issued a ten‑day ultimatum for negotiations before threatening further disclosure of the compromised information. Notably, the exfiltrated data did not appear to originate from the laboratory’s electronic medical record systems. At the time of public reporting, Meddi Laboratório had not issued any breach notification on its website or otherwise acknowledged the incident publicly. The incident highlights the laboratory’s handling of sensitive personal and financial data, which distinguishes its operational profile within the diagnostic sector.