DSG-US.COM Listed by Clop Ransomware Group

DSG-US.com, the clinical trial software and data management provider, was listed on the Clop ransomware group’s leak site on December 16, 2023. The listing indicates that internal files were exfiltrated during a ransomware attack. While the exact number of people whose information appears in the stolen data remains unknown, anyone whose clinical trial records, medical forms, or personal details passed through DSG’s systems may be affected.

Reported Details from the Listing

The Clop leak site entry for DSG-US.com states that the company was hit by a ransomware attack and that attackers successfully exfiltrated internal files. The disclosure does not quantify the volume of data taken, list specific record counts, or name the exact types of documents involved beyond “internal files.” It also does not provide a public ransom demand or deadline. The entry appeared on the group’s onion site, now archived and viewable via ransomware.live at the address http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/dsg-us-com.

Internal files exfiltrated is the only description of compromised material supplied in the primary disclosure. No samples have been publicly released on the leak site as of the initial listing date.

Why This Matters for You and Your Family

Clinical trial software companies handle highly sensitive personal information: names, dates of birth, addresses, Social Security numbers, medical histories, test results, and sometimes financial details used for study compensation. When this data leaves the company’s control, it creates permanent exposure. You cannot revoke a record that has already been copied by criminals. If your participation in a clinical study was managed through DSG’s platform, your information may now sit in an attacker’s archive, available for resale or further extortion.

Medical and trial data carries higher value on underground markets than simple login credentials. Combined with everyday personal details, it allows thieves to build convincing profiles for identity theft, insurance fraud, or targeted phishing that references your actual health conditions.

Doxxing and Identity-Chain Risks

Stolen internal files frequently contain spreadsheets that link participant IDs to contact information, email addresses, phone numbers, and sometimes household members. Once criminals possess these connections, they can chain your clinical-trial identity to your gaming accounts, social-media handles, and family relationships. A single leaked email can unlock password-reset paths across dozens of services. Children’s gaming accounts are especially vulnerable because parents often reuse credentials or recovery details that appear in family-linked trial records.

These identity chains grow over time. What begins as a clinical-trial breach can surface months later in doxxing packages that include current addresses, phone numbers, and links to family members. Continuous monitoring across large breach repositories is one of the few practical defenses.

Clop’s Known Track Record

Public reporting attributes the Clop gang’s emergence to 2019, when it began deploying the Clop ransomware variant derived from the earlier CryptoMix family. The group gained notoriety in 2021–2023 by shifting emphasis from mass encryption to selective extortion of large organizations, often targeting file-transfer software such as MOVEit and GoAnywhere. Notable prior victims include British Airways, the BBC, and several major banks and universities. Clop’s typical playbook involves initial access through vulnerable internet-facing appliances, careful exfiltration of sensitive folders before encryption, and prolonged extortion campaigns that combine data leaks with threats to notify regulators or the victims’ customers. The group has repeatedly demonstrated patience, sometimes waiting weeks before publishing samples.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any clinical-trial records that may now be circulating.
• Rotate the password used on any DSG-related portal or clinical-trial site anywhere it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours, not months.
• Cover the household — DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same addresses and recovery emails appearing in medical files.
• Let remediation specialists handle takedown requests across data brokers and leak repositories for you while you focus on securing active accounts.

The incident underscores that even specialized healthcare-technology providers remain prime targets and that stolen clinical data can fuel long-term identity abuse. Placing your digital footprint under ongoing surveillance and professional remediation gives you the best chance of limiting damage before criminals assemble complete profiles. DoxxScan by GalaxyWarden delivers that combination of continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.