Regent Care Center Listed by incransom Ransomware Group

On September 10, 2024, Regent Care Center Of Oakwell Farms appeared on the leak site operated by the incransom ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Texas-based skilled nursing and rehabilitation facility. The disclosure does not specify the number of individuals affected or list exact data types beyond the broad category of internal files.

Details from the Leak-Site Listing

The incransom leak site entry states that Regent Care Center suffered a ransomware intrusion in which attackers successfully exfiltrated data before encrypting systems. No sample files are publicly shown in the initial posting, and the group has not published a specific deadline or ransom amount in the visible listing. The notification simply marks the healthcare provider as compromised and invites interested parties to contact the actors through their onion-site portal. Public reporting on similar incransom postings indicates that the absence of detailed victim counts is common in their early-stage listings.

Why This Matters for You and Your Family

When a nursing facility or rehabilitation center is breached, the people most directly exposed are often residents, their family members, and current or former employees. Internal files in such environments routinely contain names, dates of birth, Social Security numbers, medical histories, insurance details, and contact information for both patients and staff. If your parent, grandparent, or loved one has received care at Regent Care Center Of Oakwell Farms, their personal and health information may now sit in an attacker-controlled archive. Even if you were never a patient, an employee’s stolen records can expose your own household if shared addresses, emergency contacts, or dependent information were stored in the same systems.

The Doxxing and Identity-Chain Risk

Healthcare breaches create long-term doxxing chains because medical records link names, addresses, phone numbers, and dates of birth with high confidence. Attackers or downstream data brokers can combine this information with credentials stolen in the same incident to take over email accounts, banking portals, or government services. Children’s records are not immune: many facilities keep family contact sheets that list minors as emergency contacts or dependents, and those same email addresses or phone numbers are often reused for children’s gaming accounts. A single leak can therefore cascade into account takeovers across personal, financial, and entertainment platforms. DoxxScan by GalaxyWarden continuously monitors 13.1B+ breach records across 100+ platforms and uses AI-powered identity-chain mapping to reveal exactly which handles connect back to your real identity or your family members.

Incransom’s Known Track Record

Public reporting attributes the incransom group with emerging in late 2023 as a double-extortion operation that combines ransomware deployment with public data leaks. The actors have targeted mid-sized healthcare providers, manufacturing firms, and local government entities, typically gaining initial access through phishing or unpatched remote desktop services. Once inside, they exfiltrate documents before triggering encryption. Their playbook relies on pressure through both operational disruption and the threat of releasing sensitive files on their leak site. While exact success rates remain unclear, their consistent posting of healthcare victims shows a deliberate focus on organizations likely to pay to protect resident privacy.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any records tied to Regent Care Center.
• Rotate passwords used at the facility or in any related healthcare portal anywhere those credentials are reused, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring so the next breach exposing you or your family is caught and acted upon in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents, aging parents, and children’s gaming accounts that often chain back to the same breached contact details.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise require months of individual effort.

The incident underscores that healthcare providers entrusted with your loved ones’ most private details remain prime targets, and the fallout can reach every member of your household. Start your DoxxScan trial today to gain clear visibility into existing exposures and hands-on help closing those doors before opportunistic criminals exploit them.