I&Y Senior Care Listed by losttrust Ransomware Group

On September 26, 2023, I&Y Senior Care appeared on the leak site operated by the losttrust ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the home-health agency, which supplies registered-nurse-supervised aides for hourly, 24-hour live-in, and personal-care services. The disclosure does not quantify how many patients, employees, or contractors are affected, nor does it list the specific data types beyond “internal files.”

Details in the Leak-Site Listing

The primary source, hosted on the losttrust leak site and indexed by ransomware.live, states that I&Y Senior Care was listed on September 26, 2023. It states that the agency suffered a ransomware incident in which attackers successfully exfiltrated internal files before encryption. The listing does not detail the volume of records, the exact categories of information taken, or any ransom demand. Public views of the leak site at the time of first publication showed sample screenshots of directories but no full data dump.

Why This Matters for You and Your Family

Home-health agencies hold sensitive details about older adults and their families: names, addresses, dates of birth, Social Security numbers, medical histories, insurance information, and caregiver schedules. When these records are taken, the exposure can lead to identity theft, insurance fraud, or targeted scams against vulnerable seniors. Even though the exact number of impacted individuals remains unknown, any patient or employee whose information passed through I&Y Senior Care should treat their personal data as at risk. Families who rely on in-home aides often share additional private information such as household layouts, emergency contacts, and financial arrangements for paying caregivers; all of that can appear in “internal files.”

Doxxing and Identity-Chain Risks

Stolen internal files frequently contain spreadsheets that link employee names, patient addresses, phone numbers, and email accounts. Once attackers or resellers obtain these linkages, they can map an individual’s work identity to personal accounts, social-media handles, and family relationships. This creates an identity chain that fuels doxxing, SIM-swapping, or follow-on extortion. Credential leaks from healthcare vendors also cascade into gaming accounts; children who use the same email address or password for Roblox, Fortnite, or Discord become collateral targets when a parent’s work breach exposes the shared credential. Continuous monitoring across large breach repositories is one of the few practical ways to detect these expanding chains before they are exploited.

Losttrust’s Known Track Record

Public reporting attributes losttrust with emerging in early 2023 as a double-extortion operation that both encrypts victim systems and threatens to publish stolen data. The group has listed dozens of organizations, many in healthcare, education, and small-to-medium business sectors. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of documents before deploying ransomware. Losttrust then posts samples on its leak site and sets a deadline for payment, after which it begins releasing additional batches of data. The exact tactics used against I&Y Senior Care have not been publicly detailed beyond the fact of exfiltration and listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used at I&Y Senior Care or its affiliated systems and replace it with a unique passphrase; enable 2FA through an authenticator app everywhere that credential was reused.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and emails exposed in caregiver files.
• Let remediation specialists handle takedown requests across data brokers and extortion sites on your behalf while you focus on securing accounts.

The incident underscores that even smaller care providers can become gateways to personal and family data that criminals will exploit for months or years. Treating every breach as part of a larger identity chain, rather than an isolated event, is the clearest path forward. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.