On March 21, 2025, Arkansas Primary Care Clinic PA appeared on the leak site of the ransomware group Incransom after the attackers exfiltrated 370 GB of the clinic’s internal files.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch arkansasprimarycare.com
Get alerted the next time arkansasprimarycare.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about arkansasprimarycare.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the clinic, headquartered in Little Rock, Arkansas, operates in the healthcare sector with roughly 30 employees and annual revenue of about $6.8 million. The data stolen includes internal files; the exact number of patients or individuals whose records were taken remains unknown. Incransom published proof of the breach on its dark-web blog, listing the Arkansas clinic among recent victims. Available reporting describes the incident as a classic ransomware attack involving both encryption and data exfiltration, with the group threatening to publish or sell the stolen information if demands are not met.
Why This Matters for You and Your Family
When a local healthcare provider loses control of 370 GB of internal files, the ripple effects reach far beyond the clinic. Medical records, appointment details, insurance information, and personal identifiers that tie back to you or your children can appear in criminal marketplaces. Once that data circulates, it becomes easier for thieves to open accounts in your name, file fraudulent tax returns, or target your family with phishing emails that look legitimate because they reference real visits or diagnoses. Healthcare data commands a premium on the dark web precisely because it combines medical history with financial and contact details, giving criminals a head start on identity theft that can take years to untangle.
The Doxxing and Identity-Chain Implications
A single breach rarely stays isolated. The internal files allegedly taken from Arkansas Primary Care Clinic likely contain email addresses, phone numbers, dates of birth, and possibly Social Security numbers. Attackers and data brokers routinely link these pieces together with usernames from your children’s gaming accounts, social-media handles, or old shopping profiles. What begins as a clinic record can cascade into full doxxing chains that expose home addresses, family relationships, and daily routines. Credential leaks of this nature have repeatedly led to account takeovers on gaming platforms, where children’s profiles become entry points for further harassment or extortion.