Inaya Clinique Listed by spacebears Ransomware Group

On January 21, 2025, the French medical provider Inaya Clinique appeared on the leak site of the spacebears ransomware group. The attackers claim to have stolen internal files containing databases, reports, employee records, and patient information. Anyone who has visited the clinic, worked there, or had a family member treated there may now have their personal data at risk.

What's Publicly Reported from Reporting

Public reporting indicates that spacebears posted a listing for Inaya Clinique on their dark-web leak site, providing a partial sample of the stolen material for review. The clinic’s own website describes it as a provider of cardiac surgery, gynecology, general surgery, and other personalized healthcare services. The attackers have not published the total number of affected individuals, but the data categories listed — databases, reports, employees, and patients — suggest the exposure includes names, contact details, medical histories, and internal operational records. The group typically gives victims a short window to negotiate before releasing the full archive.

Why This Matters for You and Your Family

Patient records and employee files from a medical clinic contain some of the most sensitive information about you and your loved ones. A single leak can expose medical conditions, addresses, phone numbers, dates of birth, and national identification numbers. Once that information reaches criminal marketplaces, it can be used for identity theft, insurance fraud, or targeted scams against you or your children. Medical data cannot be changed like a password; once it is public, the risk remains for years.

The Doxxing and Identity-Chain Implications

Credential leaks from healthcare providers frequently cascade into account takeovers elsewhere. An email and password pair allegedly taken from Inaya Clinique may already be reused on personal accounts, online shopping sites, or your children’s gaming platforms. Attackers use these connections to map an identity chain — linking your work email to a personal handle, then to a child’s Roblox or Fortnite account that shares the same address or recovery phone number. The result is doxxing that can expose your full household. DoxxScan by GalaxyWarden is built for exactly this scenario, delivering continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists who also cover family and household accounts, including children’s gaming profiles.

Spacebears Ransomware Track Record

Public reporting attributes the spacebears group with emerging in late 2023. The gang has targeted hospitals, clinics, and other healthcare organizations in multiple countries. Their typical playbook begins with initial access through phishing or exploited remote desktop credentials, followed by exfiltration of sensitive files before encryption. They then demand payment to prevent publication, offering free samples on their leak site to pressure victims. Notable prior incidents listed on ransomware trackers include other European medical and service-sector companies, though exact victim counts are rarely disclosed.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring so the next breach exposing your data is caught in hours rather than months.
• Rotate any password you used at Inaya Clinique or related healthcare portals anywhere it has been reused, and switch on 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts sharing the same contact details.
• Let the remediation specialists manage takedown requests across data brokers and leak sites on your behalf.

The incident shows how quickly healthcare data can move from a clinic server to a public ransomware portal. Acting promptly on the credentials and connections already exposed can limit further damage. Start your DoxxScan trial today to gain visibility into your household’s exposure and receive direct assistance closing those chains before criminals exploit them.