ptcky.com Listed by Cactus Ransomware Group

On November 17, 2024, the pediatric practice Physicians to Children & Adolescents (ptcky.com) appeared on the leak site of the Cactus ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Bardstown, Kentucky clinic, which serves families with prenatal visits, well-child check-ups, and ongoing pediatric care. The number of affected individuals remains unknown, and the precise data contained in the files has not been detailed by the attackers.

Details from the Leak-Site Listing

The Cactus leak site entry states that ptcky.com was hit in a ransomware incident and that the group successfully exfiltrated internal files before encryption. The posting includes the clinic’s address at 201 S 5th St, Bardstown, Kentucky, phone number, approximate revenue, and a brief description of its pediatric services. A download link is provided for anyone visiting the onion site, though the disclosure does not quantify the volume or specific categories of data taken. As is typical with these listings, the group is using the publication to pressure the victim into payment.

Why This Matters for You and Your Family

When a local pediatric clinic’s internal files are stolen, the exposure directly touches families who have entrusted the practice with their children’s medical histories, vaccination records, contact details, and insurance information. Even without an exact patient count, any parent or guardian whose child has been seen at Physicians to Children & Adolescents since the practice opened must assume their personal and family data could now sit in an attacker-controlled archive. Medical details are especially sensitive because they can be used for insurance fraud, prescription scams, or targeted social-engineering attacks against busy parents.

Doxxing and Identity-Chain Risks

Stolen internal files from a pediatric clinic often contain not just patient names and dates of birth but also parent contact information, home addresses, phone numbers, and email accounts. These pieces quickly form identity chains: an email address leaked here can be cross-referenced with credentials from earlier breaches, linking a parent’s work account to a child’s gaming username or family social-media profiles. The result is accelerated doxxing that can expose your household’s full digital footprint. Credential leaks of this nature frequently cascade into account takeovers on gaming platforms, where children’s accounts become entry points for further harassment or extortion.