Hackers Claim 1TB Omnicell Data Theft, Breach Unconfirmed

A ransomware group has allegedly claimed a major data theft from healthcare technology company Omnicell. The Everest group says it stole about 1 TB of data from the U.S.-based company.

The group also claims the stolen data contains more than 682,887 files. Multiple cybersecurity trackers reported the alleged attack on X on July 22, 2026. The report named Omnicell as the alleged victim and Everest as the threat actor.

However, nobody has confirmed the claim so far. Omnicell and independent security researchers have not verified that Everest breached the company. The actual amount of stolen data also remains unclear. The figures came from the ransomware group’s claim and have not received independent confirmation.

Details of the Alleged Data Theft

According to information reported by Hackmanac and covered by TechNadu, the claimed data covers several types of files. The alleged stolen information includes healthcare and pharmacy automation software. It also reportedly includes parts of source code, SQL databases, and backups. The claimed dataset also contains credentials and certificate files.

The threat of data leaks is a common tactic used by ransomware groups, a group has also threatened to leak data from Frost Bank and Citizens Bank within 6 days.

Firmware and deployment packages reportedly appear in the alleged stolen data as well. The ransomware group also claims it obtained customer implementation records. These records reportedly connect to partners and operations in several countries. The reported countries include Saudi Arabia, Australia, the United Arab Emirates, Ireland, Singapore, Qatar, and South Korea.

Chile, Spain, Sweden, and the Netherlands also reportedly appear in the claimed customer records. The alleged data could therefore cover both company information and records linked to its customers. However, no evidence currently shows exactly what information the alleged files contain.

TechNadu reported that Omnicell had not confirmed the alleged breach at the time of publication. Independent cybersecurity researchers had also not confirmed the claim. Everest has previously made data theft claims against organizations in different industries.

This makes independent checks important before anyone can confirm the latest allegation. The reported incident would also not be Omnicell’s first ransomware-related cybersecurity concern.

The company disclosed a ransomware incident in 2022 that affected some of its internal systems. Recent company disclosures also continue to list cybersecurity incidents among possible risks to its business. However, no public evidence currently connects the alleged 2026 Everest claim with Omnicell’s earlier ransomware incident.

What the Alleged Breach Could Expose

The reported data theft could matter because Omnicell works in the healthcare technology sector. The company develops automated medication management systems and pharmacy automation solutions for healthcare organizations. The alleged theft of source code, firmware, and deployment packages could therefore expose important company technology.

However, the available information does not confirm what attackers could do with those files. The claimed customer implementation records could also contain information about how Omnicell technology works at different organizations. The available reports do not confirm whether those records contain sensitive customer details.

They also do not explain how much information each record may include. The alleged theft of credentials and certificates could add another layer of concern. Still, the current reports do not confirm whether those items remain valid or usable. The same applies to the claimed databases and backups. The reports identify these files as part of the alleged dataset, but they do not confirm their contents.

For now, the reported data remains a claim made by the ransomware group. The full scope of the alleged incident cannot be confirmed from the available information. The allegation also shows why ransomware leak-site claims need careful review.

Attackers often publish claims about stolen data while trying to pressure companies during extortion attempts. However, a published claim does not automatically prove that a company suffered a breach. Researchers must still check the evidence and confirm the source of the data.

Omnicell Breach Claim Remains Unconfirmed

The alleged Omnicell incident remains unverified as of the latest available information. Everest claims that it stole about 1 TB of data and more than 682,887 files. The claimed files reportedly include software, source code, databases, credentials, firmware, and customer records.

Hackmanac reported the claim, while TechNadu also covered the alleged incident. Neither source confirmed that Omnicell suffered a successful breach.

Omnicell has not publicly confirmed the alleged 2026 attack based on the information provided. Independent cybersecurity researchers have also not verified the claim. The reported incident should therefore remain classified as an allegation.

The reported amount of stolen data should also not be treated as a confirmed figure. Further evidence from Omnicell or credible independent investigators would be needed to establish what happened. Until that happens, the alleged theft of 1 TB of data and more than 682,887 files remains unconfirmed.