National Board of Osteopathic Medical Examiners Listed by karakurt Ransomware Group

On March 20, 2023, the National Board of Osteopathic Medical Examiners appeared on the leak site operated by the karakurt ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The organization, which develops and administers licensing examinations for osteopathic physicians across the United States and internationally, has not publicly quantified the number of records involved or detailed the precise data types exposed.

Details from the Leak-Site Listing

The karakurt leak site entry states that NBOME suffered a ransomware incident resulting in the theft of internal files. No specific victim count, ransom amount, or sample documents are displayed in the public listing. The disclosure indicates the data was obtained through a ransomware attack but does not specify the initial access vector or the exact systems compromised. Public views of the onion-site page, archived through ransomware.live, show only the organization name, a generic description of “internal files,” and the date the listing became active.

Why This Matters for You and Your Family

If you, your spouse, or your children have taken or plan to take any NBOME-administered examinations, your personal information may sit inside the stolen files. Licensing boards and testing organizations routinely collect full names, dates of birth, Social Security numbers, home addresses, email accounts, phone numbers, and sometimes payment details. Even when exact figures remain unknown, the exposure of such records creates long-term risk for identity theft, tax fraud, and medical-record scams that can affect every member of a household. Internal files exfiltrated in ransomware attack often contain employee data, partner contracts, and candidate information that attackers can repurpose for weeks or months after the initial breach.

Doxxing and Identity-Chain Implications

Stolen licensing and examination data frequently serves as the anchor for larger doxxing campaigns. A single exposed email or phone number can be cross-referenced with gaming usernames, social-media handles, and family-member records to build a complete identity chain. Once attackers link an osteopathic physician’s professional details to a spouse’s or child’s online accounts, the risk of account takeover, swatting, or extortion rises sharply. Credential leaks of this nature routinely cascade into gaming-platform compromises because the same password or recovery email is reused across personal and professional services.

Karakurt Group Track Record

Public reporting attributes the karakurt ransomware group’s emergence to late 2021. The group is known for targeting healthcare, education, and professional-licensing organizations. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by data exfiltration and quiet extortion without full-system encryption. Instead of deploying ransomware on victim networks, karakurt threatens to publish sensitive files unless payment is made. Notable prior victims have included healthcare providers and testing organizations, although exact success rates and total victims remain difficult to verify from open sources.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you have ever used for NBOME-related accounts or continuing-education portals and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or recovery email.
• Let remediation specialists handle ongoing takedown requests for any newly surfaced personal records on data-broker and extortion sites.

The incident underscores that even respected professional boards remain targets and that the data they hold can haunt families for years. Start your DoxxScan trial today and combine continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists to protect yourself and every member of your household, including gaming accounts that attackers love to hijack.