Nusmiles Hospital Listed by knight Ransomware Group

On September 25, 2023, Nusmiles Hospital in Takoma Park, Maryland, appeared on the leak site operated by the knight Ransomware Group. The dental practice, which provides general and specialized dental services under the care of Michele Dozier, DDS, is claimed to have had internal files exfiltrated during a ransomware attack. The listing does not specify the number of patients or staff affected, nor does it detail the exact volume or types of records taken beyond claiming that sensitive internal documents were stolen.

Details from the Leak Site

The knight leak site entry states that Nusmiles suffered a ransomware intrusion and that attackers successfully exfiltrated internal files before encryption. No patient record count is provided, and the disclosure does not list specific data fields such as names, addresses, Social Security numbers, insurance details, or clinical notes. The posting follows the group’s standard format: an announcement of compromise, a sample of stolen material, and a deadline for payment to prevent full public release. As of the listing date, the files remained accessible only to authorized visitors of the onion site.

Why This Matters for You and Your Family

If you or your family members have received dental care at Nusmiles, your personal information may now sit in an attacker-controlled archive. Dental records frequently contain full names, dates of birth, home addresses, phone numbers, email addresses, insurance policy numbers, and sometimes Social Security numbers for billing. Even when exact contents are unknown, the exposure creates immediate risk of identity theft, insurance fraud, and phishing campaigns tailored to patients who trust the practice with health data. Families with children who visited the dentist face additional layers of risk because minors’ records can be used to build synthetic identities that remain undetected for years.

Doxxing and Identity-Chain Risks

Stolen dental files rarely exist in isolation. Attackers routinely cross-reference them with other breaches to construct detailed identity profiles. A leaked email from this incident can be matched to credential-stuffing results from earlier breaches, linking your dentist login to your banking, email, or social-media accounts. Public reporting on knight Ransomware Group shows they often publish sample documents that include spreadsheets of patient contact information, making it easier for opportunistic criminals to launch spear-phishing or SIM-swapping attacks. When children’s records are included, gaming usernames or parent-linked email addresses can become entry points for account takeovers that expose family photos, chat logs, and location data.

Knight Ransomware Group Track Record

Public reporting attributes the knight Ransomware Group’s first notable campaigns to early 2023. The group has targeted healthcare providers, small manufacturers, and professional service firms across the United States and Europe. Their typical playbook begins with phishing or exploitation of remote-desktop services for initial access, followed by rapid exfiltration of documents before deploying encryption. They maintain a leak site on the dark web where they post proof of compromise and demand payment, often giving victims a short window—sometimes as little as one week—before releasing the full archive. Unlike some larger ransomware operations, knight does not appear to maintain a formal data leak marketplace for third-party sales, preferring direct extortion of the victim organization.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, using cleanup of Warden to break exposure chains started by this claimed breach.
• Rotate any password you ever used at Nusmiles anywhere it has been reused, and immediately enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next credential leak tied to your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often chain back to the same parent email or address exposed in healthcare incidents.
• Let remediation specialists handle takedown requests for any samples already posted on forums or data-broker sites that surfaced from the knight leak.

The Nusmiles listing is a reminder that even small local healthcare providers remain high-value targets because patient data retains its worth long after the ransom deadline passes. Starting proactive defense now limits how far attackers can travel down the identity chain that begins with a dental visit. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-stuffing cascades.