Clarke Radiology Listed by thegentlemen Ransomware Group

On July 23, 2026, Clarke Radiology (also known as Clarke Medical Imaging Center) in Montreal, Quebec, was listed on the leak site operated by the thegentlemen ransomware group. The listing indicates that internal files were exfiltrated during a ransomware attack on the medical imaging facility. The number of affected individuals remains unknown, as neither the leak-site posting nor any subsequent company notification has disclosed specific patient or employee record counts.

Reported Details from the Listing

The primary disclosure on the thegentlemen leak site states that Clarke Radiology suffered a ransomware incident resulting in the theft of internal files. The posting does not specify the volume or exact nature of the data taken, nor does it list sample files or publish any of the allegedly stolen material at this time. The disclosure indicates the incident occurred prior to the July 23, 2026 publication date, but provides no precise timeline of initial access, exfiltration, or encryption. As is common with many ransomware leak sites, the listing serves as both proof of compromise and a public pressure tactic against the victim organization.

Why This Matters for You and Your Family

If you or any member of your family has ever received diagnostic imaging services at Clarke Radiology — whether an X-ray, MRI, ultrasound, mammogram, or bone density scan — your personal health information may have been exposed. Medical imaging centers routinely collect and store full names, dates of birth, addresses, phone numbers, health card numbers, referring physician details, and detailed clinical images and reports. Even when exact numbers are not published, the exposure of internal files from a radiology practice creates significant privacy risk because health data is among the most sensitive categories of personal information. A breach of this type can lead to identity theft, insurance fraud, and long-term reputational harm that affects employment, credit, and personal relationships.

Doxxing and Identity-Chain Risks

Health records rarely exist in isolation. A single leaked radiology file often contains enough overlapping data — name, address, date of birth, phone number, and sometimes email — to link disparate online accounts together. Threat actors routinely use these medical breadcrumbs to map an individual’s digital footprint across social media, patient portals, employer systems, and children’s gaming accounts. Once the identity chain is established, credential-stuffing attacks, SIM-swapping attempts, and targeted extortion become far easier. Public reporting on similar incidents shows that medical breaches frequently cascade into doxxing campaigns where private health conditions are weaponized for harassment or financial demands.

Thegentlemen Ransomware Group Track Record

Public reporting attributes thegentlemen as a relatively new ransomware/extortion operation that emerged in late 2024. The group is known for targeting mid-sized organizations across North America and Europe, with a particular focus on healthcare, legal, and manufacturing sectors. Notable prior victims include several regional medical clinics and professional service firms. Their typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by exfiltration of sensitive files before deploying ransomware. Rather than always encrypting systems, thegentlemen frequently emphasize data theft and public shaming on their leak site when victims refuse to pay. They set short negotiation deadlines, often between 7 and 14 days, after which they threaten to publish or sell the stolen data.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, usernames, and real-world identity using continuous monitoring across 15.4B+ breach records and 100+ platforms.
• Rotate any password you have ever used at Clarke Radiology or associated patient portals anywhere it is reused, and immediately enable 2FA with an authenticator app rather than SMS.
• Cover your entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same home address or parent email.
• Let remediation specialists perform hands-on takedown requests across data brokers and extortion platforms on your behalf.
• Monitor all Explanation of Benefits statements and contact your provincial health authority if you notice unfamiliar claims or billing activity tied to Clarke Radiology.

The exposure of medical imaging data rarely remains contained to one organization. Acting quickly on both credential hygiene and identity mapping is the most effective way to limit downstream harm. DoxxScan by GalaxyWarden provides continuous monitoring across 15.4 billion breach records and over 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that explicitly includes children’s gaming accounts vulnerable to credential-based takeovers.