nosm.ca Listed by dispossessor Ransomware Group

Northern Ontario School of Medicine University was listed on the Dispossessor ransomware group’s leak site on May 17, 2023. The Canadian public medical university, which trains doctors and supports healthcare across northern Ontario’s urban, rural, and remote communities, is claimed to have had internal files exfiltrated during a ransomware attack. Anyone connected to the institution — students, faculty, staff, alumni, patients, or research partners — may now face heightened personal exposure.

Reported Details from the Listing

The Dispossessor leak site states that Northern Ontario School of Medicine University suffered a ransomware incident and that attackers successfully exfiltrated internal files. The listing does not quantify how many records were taken, name the specific systems compromised, or describe the exact data types beyond “internal files.” No ransom amount or payment deadline appears in the public posting. The disclosure indicates the data is available for download to other threat actors, a standard extortion tactic intended to pressure the victim organization.

Why This Matters for You and Your Family

Medical universities hold sensitive information that directly affects real people. If your name, address, date of birth, Social Insurance Number, medical history, academic records, or financial details were inside the stolen files, those records can be used to commit identity theft, file fraudulent tax returns, open accounts in your name, or target you with convincing phishing attacks. Because the university serves remote communities, many affected families have limited access to in-person support services, making timely self-protection even more important. The breach notification does not confirm whether patient-care data was included, so treat the possibility as real until more details emerge.

Doxxing and Identity-Chain Risks

Once internal files reach criminal marketplaces, attackers rarely stop at the first use. A single exposed email or phone number can be correlated with gaming usernames, social-media handles, and family-member profiles. This creates an identity chain that leads to doxxing, account takeovers, and harassment. Credential leaks of this kind frequently cascade into gaming platforms, where children’s accounts become entry points for further targeting because parents often reuse passwords across work, school, and home systems. The longer the data sits on leak sites, the more likely it is to be combined with other breaches to build detailed dossiers on you and your household.

Dispossessor Group’s Known Track Record

Public reporting attributes the Dispossessor ransomware operation to a group that emerged in late 2022. The actors typically gain initial access through phishing or exploited remote-desktop services, exfiltrate data before deploying encryption, and then launch dual extortion: threatening both data publication and system downtime. Notable prior victims include other educational institutions and healthcare-related organizations. Their playbook relies on public leak sites to amplify pressure, often releasing sample files to demonstrate possession. While exact links between different Dispossessor campaigns remain under investigation, the group’s consistent use of data-leak blogs matches the May 17, 2023 listing for Northern Ontario School of Medicine University.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used at the university anywhere else it appears, and switch to 2FA through an authenticator app instead of text messages.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that can chain back to the same address or breached credentials.
• Let remediation specialists manage takedown requests for any exposed personal information found on data-broker and leak sites.

The incident underscores that ransomware groups continue to treat educational and medical data as high-value leverage. Protecting yourself no longer ends with hoping the university issues a timely notice; it requires ongoing vigilance. DoxxScan by GalaxyWarden delivers that vigilance through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach has opened.