On March 20, 2023, the National Board of Osteopathic Medical Examiners appeared on the leak site operated by the karakurt ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The organization, which develops and administers licensing examinations for osteopathic physicians across the United States and internationally, has not publicly quantified the number of records involved or detailed the precise data types exposed.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Details from the Leak-Site Listing
The karakurt leak site entry states that NBOME suffered a ransomware incident resulting in the theft of internal files. No specific victim count, ransom amount, or sample documents are displayed in the public listing. The disclosure indicates the data was obtained through a ransomware attack but does not specify the initial access vector or the exact systems compromised. Public views of the onion-site page, archived through ransomware.live, show only the organization name, a generic description of “internal files,” and the date the listing became active.
Why This Matters for You and Your Family
If you, your spouse, or your children have taken or plan to take any NBOME-administered examinations, your personal information may sit inside the stolen files. Licensing boards and testing organizations routinely collect full names, dates of birth, Social Security numbers, home addresses, email accounts, phone numbers, and sometimes payment details. Even when exact figures remain unknown, the exposure of such records creates long-term risk for identity theft, tax fraud, and medical-record scams that can affect every member of a household. Internal files exfiltrated in ransomware attack often contain employee data, partner contracts, and candidate information that attackers can repurpose for weeks or months after the initial breach.
Doxxing and Identity-Chain Implications
Stolen licensing and examination data frequently serves as the anchor for larger doxxing campaigns. A single exposed email or phone number can be cross-referenced with gaming usernames, social-media handles, and family-member records to build a complete identity chain. Once attackers link an osteopathic physician’s professional details to a spouse’s or child’s online accounts, the risk of account takeover, swatting, or extortion rises sharply. Credential leaks of this nature routinely cascade into gaming-platform compromises because the same password or recovery email is reused across personal and professional services.