Contact Cottrell and McCullough Listed by ALPHV Ransomware Group

On November 2, 2023, the dental clinic Contact Cottrell and McCullough appeared on the leak site of the Alphv ransomware group. The listing states that internal files were exfiltrated during a ransomware attack and that the clinic’s patient data from the @cottrell-dental system is now publicly available. The number of affected individuals remains unknown, and the precise contents of the leaked files have not been detailed by the group.

Primary Disclosure Details

The Alphv leak site entry, still accessible via the onion link at the time of analysis, states that internal files were exfiltrated after the clinic failed to meet the group’s demands. It explicitly references patient data tied to the clinic’s @cottrell-dental handle. No exact record count is provided, no sample files are shown in the initial listing, and no ransom amount is disclosed publicly. The disclosure follows the standard Alphv format: a victim name, a brief statement of compromise, and a countdown timer that had already expired by early November 2023.

Why This Matters for You and Your Family

If you or any member of your family has ever been a patient at Contact Cottrell and McCullough, your personal health information may now sit in an attacker-controlled archive. Dental records frequently contain full names, dates of birth, Social Security numbers, addresses, phone numbers, insurance details, and clinical notes. Once such data leaves a controlled environment, it circulates among initial buyers and downstream fraud operators. Even without a precise victim count, the exposure creates immediate risk for identity theft, insurance fraud, and targeted phishing campaigns that reference real treatment history.

Doxxing and Identity-Chain Risks

Patient data rarely travels alone. A single dental record can link an email address or phone number to real-world identity, which then chains to social-media handles, gaming accounts, and family-member profiles. Attackers automate this linkage, turning one breach into a persistent profile that follows you across services. The result is not a single incident but an expanding web of doxxing that can lead to harassment, account takeovers, or financial fraud months or years later.

Alphv’s Public Track Record

Public reporting attributes the emergence of Alphv, also known as BlackCat, to late 2021. The group has since claimed responsibility for attacks on hundreds of organizations across healthcare, manufacturing, and professional services. Notable prior victims include large healthcare providers and law firms where sensitive personal and corporate data was allegedly exfiltrated and later published when ransom demands went unmet. Their typical playbook begins with initial access gained through compromised credentials or remote desktop services, followed by rapid lateral movement, data exfiltration, and deployment of custom ransomware. Extortion combines encryption with threats to publish stolen files on their leak site, often accompanied by direct contact to executives or public shaming of the victim organization.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including cleanup of exposed records.
• Rotate any password you have ever used at the clinic or associated patient portals anywhere it is reused, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address and patient records.
• Let remediation specialists handle takedown requests across data brokers and leak repositories on your behalf while you focus on securing daily accounts.

The incident underscores that healthcare breaches continue to expose ordinary families to long-term identity risks that do not vanish when the news cycle moves on. Starting proactive defense now can limit how far this particular leak travels. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that often follow leaks like this one.