juvaskin.com Listed by lockbit3 Ransomware Group

On January 30, 2023, the medical practice juvaskin.com appeared on the LockBit 3.0 ransomware leak site, claiming that its internal files had been exfiltrated during an attack. Anyone who has visited JUVA Skin & Laser Center in New York City for dermatology, cosmetic procedures, or laser treatments may have their personal information now in the hands of extortionists. The listing does not specify the number of records involved or the exact data types beyond “internal files.”

Details from the Leak Site

The primary disclosure on the LockBit 3.0 portal, archived via ransomware.live, states that JUVA Skin & Laser Center suffered a ransomware incident and that attackers successfully exfiltrated internal files. No patient count, ransom amount, or deadline is published on the listing itself. The practice’s own breach notification has not been located in public regulatory filings, so the precise volume and sensitivity of the stolen data remain unknown to outsiders. What is certain is that a New York medical provider’s internal documents may now be publicly listed for anyone willing to browse the extortion site.

Why This Matters for You and Your Family

Medical records contain some of the most sensitive details about your life: names, dates of birth, addresses, Social Security numbers, insurance information, treatment histories, and sometimes photographs taken during cosmetic procedures. When this information leaves a clinic’s control, it creates lifelong exposure. Identity thieves can use it to file fraudulent tax returns, open accounts in your name, or sell it on underground markets. Your family members listed as emergency contacts or guarantors on the same records face the same risk. Even if you live outside New York, a single visit to JUVA for laser hair removal or skin treatment can place your household in the breach.

Doxxing and Identity-Chain Risks

Stolen medical files rarely stay isolated. Attackers routinely cross-reference patient names and addresses with usernames found in other breaches, creating detailed identity chains that link your real name to gaming handles, social-media accounts, and family members. A child’s gaming username tied to the same home address can quickly become the entry point for harassment or further account takeovers. These chains grow over months or years, turning one clinic breach into repeated targeting across multiple platforms.

LockBit 3.0’s Known Track Record

Public reporting attributes the LockBit 3.0 variant to a ransomware operation that first appeared in 2020 and rebranded multiple times while maintaining aggressive double-extortion tactics. The group typically gains initial access through compromised remote desktop credentials or vulnerable web applications, exfiltrates data before deploying ransomware, then posts samples on its leak site when victims refuse to pay. Notable prior targets have included healthcare providers, law firms, and municipalities. The group’s playbook emphasizes speed, automation, and public shaming to pressure organizations into negotiation. While exact attribution to specific individuals remains uncertain, the operational pattern has remained consistent across hundreds of victims.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you ever used at juvaskin.com or associated patient portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same address and medical records.
• Let remediation specialists manage takedown requests for any exposed personal documents appearing on data-broker or extortion sites.

The JUVA Skin & Laser Center breach illustrates how quickly a single medical visit can feed long-term identity abuse. Staying ahead requires more than one-time checks; it demands ongoing visibility and expert intervention. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that often follow these leaks.