On August 25, 2025, the medical practice Broward Institute of Orthopaedic Specialties, known as BIOS, appeared on the leak site of the safepay ransomware group. The attackers posted proof that they had exfiltrated internal files from biosorthopedics.com during a ransomware incident. Patients and staff whose personal and medical information was stored in those systems may now face heightened risks of identity theft and doxxing.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting indicates that BIOS is a multi-physician orthopaedic practice with locations in Hollywood and Pembroke Pines, Florida. The safepay group listed the organization on its dark-web leak site on August 25, 2025, claiming to have stolen internal files. No exact victim count has been released, and the precise volume or type of data remains unclear beyond the broad description of internal files. The practice has not yet issued a public statement confirming the breach or detailing what records were taken.
Why This Matters for You and Your Family
When a medical provider is hit, the information exposed often includes names, addresses, dates of birth, Social Security numbers, insurance details, and clinical notes. For you or your family members who have visited BIOS, that data can be used to file fraudulent tax returns, open accounts in your name, or build a profile that makes spear-phishing attacks far more convincing. Medical records carry lifelong sensitivity; once they surface on criminal forums, they never truly disappear. Families with children who have also received care there face compounded risk because minors’ records can be paired with parental data to create full household profiles.
The Doxxing and Identity-Chain Implications
Ransomware leaks rarely stop at one company. A single exposed email or phone number from a medical practice can be cross-referenced with gaming accounts, social-media handles, and data-broker records. Attackers follow these identity chains to locate family members, map relationships, and escalate from simple credential theft to full doxxing. Credential leaks like this one frequently cascade into account takeovers on gaming platforms, where children’s usernames and shared family passwords become entry points for further harassment or extortion. The chain moves fast: today’s orthopaedic patient file becomes tomorrow’s targeted phishing campaign or SIM-swapping attempt.