On October 24, 2023, the medical practice of EDUARDO G. BARROSO appeared on the leak site operated by the 8base ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The number of affected patients remains unknown, and the precise records taken have not been detailed in the disclosure.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Eduardo G. Barroso
Get alerted the next time Eduardo G. Barroso files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Eduardo G. Barroso’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The 8base leak site entry states that Eduardo G. Barroso’s systems were compromised and that attackers successfully removed internal files. The practice’s own public description emphasizes its focus on cosmetic and aesthetic procedures, patient education, and personalized care from initial consultation through post-procedure follow-up. No patient record count is provided, nor does the listing specify the exact categories of data exfiltrated. The disclosure simply states that internal files were taken and are now held by the group.
Why This Matters for You and Your Family
If you or a family member have been a patient at this practice, your personal health information, contact details, and possibly financial records may now sit in an attacker’s archive. Medical data is especially sensitive because it can reveal procedures, diagnoses, and physical characteristics that many people prefer to keep private. Exposure of such details can lead to insurance complications, employment discrimination, or simple embarrassment. Even when the exact volume of records is unknown, the claimed exfiltration of internal files means the risk is real and should be treated seriously.
Doxxing and Identity-Chain Risks
Stolen internal files frequently contain names, addresses, phone numbers, email accounts, dates of birth, and sometimes driver’s license or Social Security numbers. Once these details surface, they become the foundation for doxxing chains that link your professional identity to personal handles, family members, and even children’s online gaming accounts. A single credential leak can cascade into account takeovers across email, banking, and social platforms. Public reporting on similar incidents shows that medical breaches often accelerate identity theft because health data provides both credibility and leverage for social-engineering attacks.