New Horizons Medical Listed by alphv Ransomware Group

On June 14, 2023, New Horizons Medical, PC appeared on the leak site operated by the alphv ransomware group. The Massachusetts-based physician practice, which specializes in prescribing buprenorphine for patients recovering from opioid dependence, had its internal files exfiltrated during a ransomware incident. Anyone who has been a patient, employee, or business associate of the practice since its founding in 2009 may have personal information now in the hands of extortionists.

Reported Details from the Listing

The alphv leak site entry states that New Horizons Medical suffered a ransomware attack in which attackers successfully exfiltrated internal files. The disclosure does not quantify the number of affected records, list specific data types exposed, or reveal the ransom demand. It simply states that data was taken and warns that samples will be published if the victim does not negotiate. The listing remains active on the onion site, indicating the matter has not been resolved to the group’s satisfaction. Public mirrors of the leak site, such as ransomware.live, preserve the original posting date of June 14, 2023.

Why This Matters for You and Your Family

If you or a family member has sought treatment for opioid dependence at New Horizons Medical, your medical history, contact details, insurance information, and possibly Social Security numbers could be exposed. Health records are especially sensitive because they can be used for insurance fraud, prescription forgery, or targeted phishing that references your specific treatment. Even if you were never a patient, employees’ payroll data, vendor contracts, or internal emails may contain your information if you interacted with the practice. The breach therefore reaches beyond the clinic’s walls into the lives of patients, staff, and their households.

Doxxing and Identity-Chain Risks

Medical breaches create long-term doxxing vectors. Attackers can combine leaked names, addresses, phone numbers, and email addresses with information from other breaches to build complete identity profiles. These profiles often link to family members, including children. A parent’s treatment record can expose a teenager’s gaming username if the same email or phone was reused for an Xbox, Steam, or Roblox account. Once the chain is mapped, extortionists can harass the entire household. Credential leaks of this nature frequently cascade into account takeovers that give attackers access to financial portals, school systems, and social-media profiles.

Alphv’s Known Track Record

Public reporting attributes the alphv group, also known as BlackCat, with emerging in late 2021 after the shutdown of the REvil ransomware operation. The gang has targeted hospitals, manufacturers, and professional service firms across North America and Europe. Their typical playbook involves initial access through compromised remote desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and then dual extortion: threatening both data publication and system encryption. Alphv frequently posts victim data on its dark-web leak site when negotiations stall, using countdown timers and sample file releases to increase pressure. The New Horizons Medical listing fits this established pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup of exposed records.
• Enable continuous DoxxScan monitoring so the next breach that touches you or your family is caught in hours rather than months.
• Rotate any password you ever used at New Horizons Medical or related patient portals anywhere it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that can be chained back to the same address or parent email.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume months of your time.

The incident underscores that even small medical practices handling highly personal recovery data remain prime targets. One breach can ripple outward for years, quietly feeding identity theft and harassment campaigns. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, including household coverage that explicitly protects children’s gaming accounts from cascading takeovers. Starting proactive defense now limits how far this leak can reach.