Regent Care Center Listed by INC Ransom Ransomware Group

On September 10, 2024, Regent Care Center Of Oakwell Farms appeared on the leak site operated by the incransom ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Texas-based skilled nursing and rehabilitation facility. The disclosure does not specify the number of individuals affected or list exact data types beyond the broad category of internal files.

Details from the Leak-Site Listing

The incransom leak site entry states that Regent Care Center suffered a ransomware intrusion in which attackers successfully exfiltrated data before encrypting systems. No sample files are publicly shown in the initial posting, and the group has not published a specific deadline or ransom amount in the visible listing. The notification simply marks the healthcare provider as compromised and invites interested parties to contact the actors through their onion-site portal. Public reporting on similar incransom postings indicates that the absence of detailed victim counts is common in their early-stage listings.

Why This Matters for You and Your Family

When a nursing facility or rehabilitation center is breached, the people most directly exposed are often residents, their family members, and current or former employees. Internal files in such environments routinely contain names, dates of birth, Social Security numbers, medical histories, insurance details, and contact information for both patients and staff. If your parent, grandparent, or loved one has received care at Regent Care Center Of Oakwell Farms, their personal and health information may now sit in an attacker-controlled archive. Even if you were never a patient, an employee’s stolen records can expose your own household if shared addresses, emergency contacts, or dependent information were stored in the same systems.

The Doxxing and Identity-Chain Risk

Healthcare breaches create long-term doxxing chains because medical records link names, addresses, phone numbers, and dates of birth with high confidence. Attackers or downstream data brokers can combine this information with credentials stolen in the same incident to take over email accounts, banking portals, or government services. Children’s records are not immune: many facilities keep family contact sheets that list minors as emergency contacts or dependents, and those same email addresses or phone numbers are often reused for children’s gaming accounts. A single leak can therefore cascade into account takeovers across personal, financial, and entertainment platforms. DoxxScan by GalaxyWarden continuously monitors 13.1B+ breach records across 100+ platforms and uses AI-powered identity-chain mapping to reveal exactly which handles connect back to your real identity or your family members.