On January 3, 2025, the 8base ransomware group added Carrollton Orthopaedic Clinic — now operating as Ortho West — to its public leak site, claiming that internal files had been exfiltrated during a ransomware attack on the Georgia-based medical practice.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting indicates that Ortho West, which provides orthopedic care across West Georgia and East Alabama, had sensitive internal documents stolen. The 8base group listed the clinic on its dark-web leak page, a standard step in its double-extortion playbook. No exact number of patient records exposed has been disclosed, and the precise volume or specific categories of data remain unconfirmed in available reporting. The clinic’s website describes a full range of orthopedic services, confirming it handles typical medical records that often include names, addresses, dates of birth, Social Security numbers, insurance details, and clinical notes.
January 3, 2025 marks the public listing date. The breach falls into the growing category of healthcare ransomware incidents where patient data is both encrypted for ransom and exfiltrated for additional leverage.
Why This Matters for You and Your Family
When a local medical provider is hit, anyone who has ever been a patient — or had a child, parent, or spouse treated there — faces real risk. Stolen medical and personal information can be used for identity theft, insurance fraud, or sold on underground markets where it retains value for years. For families, a single breach can expose multiple generations if parents listed children as dependents or shared household contact details.