molars.co.ke Listed by RansomHub Ransomware Group

On January 6, 2025, the ransomware group RansomHub added molars.co.ke to its leak site, claiming that internal files from the Nairobi-based dental practice had been exfiltrated.

What Public Reporting Shows

Public reporting indicates that RansomHub claims to have stolen internal documents from Molars Dental Clinic, a practice offering general dentistry, orthodontics, and oral surgery in Kenya. The exact number of patient records affected remains unknown. Available reporting describes the data as internal files taken during a ransomware incident. The listing appeared on the group’s dark-web leak page with a unique identifier linking it to molars.co.ke. No patient count or detailed file inventory has been publicly released by the clinic or the attackers.

Why This Matters for You and Your Family

When a local health provider is breached, the information exposed often includes names, contact details, dates of birth, medical history, and sometimes payment records. These details are valuable to identity thieves who combine them with other leaks to build a complete profile. For you and your family, that can mean unexpected bills, fraudulent insurance claims in your name, or targeted scams that reference real dental visits. Even if you live outside Kenya, patient data travels across borders through global breach markets. A single clinic breach can quietly add your family’s information to databases used for years.

The Doxxing and Identity-Chain Risks

Medical records frequently contain email addresses, phone numbers, and physical addresses that link online handles to real identities. Once attackers or data resellers obtain these connections, they can map your family’s digital footprint across social media, gaming platforms, and shopping accounts. Credential leaks like this one often cascade into account takeovers, especially for gaming logins that reuse the same passwords or recovery emails. Children’s gaming accounts are particularly vulnerable because parents commonly share family email addresses. The result is a chain that can lead to doxxing, harassment, or financial fraud months after the original breach.

RansomHub’s Publicly Known Track Record

Public reporting attributes RansomHub’s emergence to mid-2024. The group has listed healthcare providers, retailers, and technology firms in its short history. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by data exfiltration before encryption. RansomHub then demands payment and, if unpaid, publishes samples or full datasets on its leak site. The group’s extortion style relies on pressure through public exposure rather than prolonged negotiation. Readers can follow independent trackers for updates on its activity.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity, with cleanup included.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used at molars.co.ke or similar health providers, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same contact details.
• Let remediation specialists handle takedown requests for any exposed personal records found in broker sites or forums.

The incident shows that even routine medical visits can expose data that follows your family for years. Starting with a clear picture of where your information appears online remains one of the most practical defenses available. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.