BSA Hospice of the Southwest Listed by Vice Society Ransomware Group

BSA Hospice of the Southwest was listed on the Vice Society ransomware leak site on August 21, 2022. The nonprofit hospice provider, which serves patients and families across the Southwest, now faces the public exposure of internal files the attackers claim to have stolen during a ransomware incident. Anyone whose medical records, employment documents, or personal information passed through the organization may be affected.

Details from the Leak Site

The Vice Society listing states that the group exfiltrated internal files from BSA Hospice of the Southwest during a ransomware attack. The disclosure does not quantify how many records were taken or list specific data types. It simply states that data was stolen and is now held by the attackers. As of the listing date, the site had not published samples, though Vice Society often releases proof files or full datasets if ransom demands are ignored. The exact volume and sensitivity of the material therefore remain unknown to the public.

Why This Matters for You and Your Family

Hospice organizations handle deeply personal information: patient names, addresses, dates of birth, Social Security numbers, medical histories, insurance details, and family contact records. When these records leave the organization’s control, the risk extends beyond the patient to spouses, children listed as emergency contacts, and anyone whose data appears in billing or employment files. A single breach like this can supply criminals with enough material to open accounts, file fraudulent tax returns, or impersonate family members for years. Because the notification does not specify what was taken, you must assume the worst and treat every piece of information you ever gave the hospice as potentially public.

Doxxing and Identity-Chain Risks

Stolen internal files rarely stay isolated. Attackers and downstream criminals combine them with credential leaks, public records, and social-media handles to build complete identity profiles. A phone number listed in a hospice billing file can link to your email, which links to a reused password, which leads to account takeovers on banking, email, or government portals. Children’s information included in family files can accelerate this chain, especially when gaming accounts reuse the same email or password. The result is persistent doxxing that follows your household long after the initial breach fades from headlines.

Vice Society’s Known Track Record

Public reporting attributes Vice Society’s first major appearances to mid-2021. The group has since targeted schools, healthcare providers, and nonprofit organizations across the United States, Europe, and Australia. Their typical playbook begins with initial access gained through phishing, remote-desktop vulnerabilities, or compromised credentials. Once inside, they exfiltrate data before deploying ransomware. If the victim refuses to pay, Vice Society posts proof files or full datasets on their leak site and sometimes pressures the organization through direct contact with journalists or affected individuals. Healthcare and hospice victims appear repeatedly in their history, suggesting the group views these entities as both lucrative and less likely to have robust defenses.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught in hours rather than months.
• Rotate any password you ever used at BSA Hospice of the Southwest wherever it appears, and switch to 2FA through an authenticator app instead of text messages.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and emails exposed in breaches like this.
• Let remediation specialists handle ongoing takedown requests across data brokers and leak sites on your behalf while you focus on securing your own accounts.

The breach of BSA Hospice of the Southwest shows how quickly sensitive personal and medical data can move from a trusted care provider into the hands of extortionists. Acting quickly on credential hygiene and identity mapping gives you the best chance of breaking the chain before criminals exploit it. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.