Regina Dental Group Listed by medusa Ransomware Group

On March 23, 2024, Regina Dental Group appeared on the Medusa ransomware group's leak site. The Canadian dental practice, which operates clinics at Normanview Crossing, Grasslands Dental, and Southland Mall with its corporate office at 398 McCarthy Blvd in Regina, Saskatchewan, is claimed to have had internal files exfiltrated during a ransomware attack. The leak-site listing does not specify the number of people affected or detail the exact contents of the stolen data.

Details from the Medusa Listing

The primary disclosure on the Medusa leak site states that Regina Dental Group suffered a ransomware attack in which attackers exfiltrated internal files. No patient record count is provided, and the listing does not break down the types of documents taken. The corporate office employs 10 people, but the disclosure does not clarify whether employee or patient information was included in the exfiltrated material. As is typical with these listings, the group threatens further publication if demands are not met, though specific ransom amounts are not shown in the public entry.

March 23, 2024 marks the first public confirmation of the incident through the ransomware leak site, accessible via the onion link hosted on ransomware.live.

Why This Matters for You and Your Family

If you or your family members have received dental care from Regina Dental Group, your personal information may now sit in an attacker-controlled archive. Dental offices routinely store full names, addresses, dates of birth, Social Insurance Numbers, health insurance details, and treatment records. Even without an exact victim count, the exposure creates immediate risk because medical and financial data command high value on underground markets. Families in the Regina area should assume that any information provided during appointments could surface publicly or be sold privately.

Doxxing and Identity-Chain Risks

Stolen internal files rarely contain isolated facts. A single spreadsheet can link your name to your home address, phone number, email, and insurance policy. Attackers and data brokers then combine these fragments with credential leaks from other breaches, building detailed identity profiles. These chains often extend to online accounts, including gaming profiles used by children. A compromised email from a dental visit can lead to account takeovers that expose chat logs, friend lists, and location data, accelerating doxxing campaigns. What begins as a healthcare breach can cascade into harassment, identity theft, or targeted scams against every member of the household.

Medusa Group's Known Track Record

Public reporting attributes Medusa as a ransomware operation that emerged in 2021. The group is known for double-extortion tactics: encrypting victim systems while simultaneously exfiltrating data to pressure payment. Notable prior victims include organizations across healthcare, education, and professional services sectors. Medusa typically gains initial access through phishing, remote desktop protocol weaknesses, or compromised credentials, then moves laterally to locate and steal sensitive folders before deploying ransomware. Their leak site serves as both a shaming platform and a sales venue for unsold data, a playbook consistent across dozens of incidents documented in industry trackers.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by Warden specialists.
• Rotate any password you ever used when booking appointments or logging into the Regina Dental Group patient portal, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught and acted upon in hours, not months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children's gaming accounts, which frequently become targets when credential leaks chain back to a shared family address.
• Let remediation specialists manage takedown requests for any exposed personal documents or broker listings that appear after this incident.

The Regina Dental Group breach is a reminder that even routine healthcare visits can place your family's most sensitive details in criminal hands. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children's gaming accounts vulnerable to cascading takeovers.