FysioRoadmap Listed by nova Ransomware Group

On September 28, 2025, the nova Ransomware Group added FysioRoadmap to its public leak site and claimed to have stolen 10GB of data containing more than 20,000 documents that include Dutch citizens’ BSN numbers.

What Public Reporting Shows

Available reporting describes FysioRoadmap as a Dutch electronic patient record system developed by Monitored Rehab Systems. The company also manufactures physical therapy and rehabilitation hardware such as the MR Cube, functional squat machines, and Kneelax devices. The ransomware operators state they exfiltrated internal files from the company’s network during a ransomware attack. No exact number of patients or individuals affected has been confirmed, but the presence of BSN numbers — the Dutch equivalent of a Social Security number — means thousands of physiotherapy patients could be exposed. The leak site post includes a sample of the stolen material to support the group’s claim.

Why This Matters for You and Your Family

If you or anyone in your household has received physiotherapy treatment in the Netherlands in recent years, your personal health records and national identification number may now sit in a criminal data repository. BSN numbers combined with medical histories allow identity thieves to open accounts, apply for credit, or file fraudulent tax returns in your name. Children and teenagers who attend sports physiotherapy or rehabilitation programs are equally at risk because family addresses and contact details often link parent and child records. Once your information is public, it rarely disappears completely; copies circulate for years on underground forums.

The Doxxing and Identity-Chain Implications

A single breach like this rarely stays isolated. Criminals use leaked emails, phone numbers, and BSN data to map additional accounts across social media, gaming platforms, and online shops. Public reporting indicates that such credential leaks frequently cascade into account takeovers. Gaming accounts belonging to you or your children are especially vulnerable because usernames and passwords reused from medical portals can hand attackers entry to Discord, Roblox, Steam, or Fortnite profiles. From there, doxxing chains form quickly: an attacker who controls a child’s gaming handle can extract linked email addresses, then phone numbers, then home addresses, turning one physiotherapy record into a full identity profile that can be sold or used for harassment.

Nova Ransomware Group’s Known Track Record

Public reporting attributes the nova Ransomware Group with emerging in late 2024. The group has listed healthcare providers, manufacturing firms, and smaller software companies among its victims. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. The operators then demand ransom and, upon non-payment, publish samples and eventually larger portions of the stolen data on their dark-web leak site. Extortion tactics combine data leaks with threats to notify customers or regulators. Exact success rates remain unclear, but the group continues to maintain an active leak portal that lists new victims every few weeks.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, handles, and real identity so you can see exactly what chains back to the FysioRoadmap breach.
• Rotate the password you used for any Monitored Rehab Systems or FysioRoadmap portal anywhere else it is reused, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is caught and addressed within hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often share the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing day-to-day accounts.

The FysioRoadmap incident shows how quickly a routine medical appointment can expose your family’s most sensitive identifiers to professional criminals. Taking concrete steps now limits the damage and prevents one breach from becoming the first link in a larger doxxing chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information.