RJP MEDICAL LTDA Listed by 8base Ransomware Group

On June 10, 2023, Brazilian plastic-surgery clinic RJP Medical Ltda, operating as Premier Hospital Dia and closely tied to surgeon Roberto Junqueira Polizzi, appeared on the leak site of the 8base ransomware group. The listing states that internal files were exfiltrated during a ransomware attack; the exact number of records and the full scope of data remain undisclosed by both the group and the clinic.

Primary Disclosure Details

The 8base leak-site entry, still accessible via the onion address hosted on ransomware.live, states that RJP Medical Ltda suffered a ransomware intrusion in which attackers copied internal files before encrypting systems. No patient count, no specific data types such as names, addresses, medical histories or payment details, and no ransom amount are published in the listing. The clinic’s own website describes a facility with five operating rooms, semi-intensive care beds, suites and short-stay apartments focused exclusively on plastic surgery. As of the publication date the listing remained active, indicating the extortion window had not closed.

Why This Matters for You and Your Family

When a specialized medical provider is hit, the people most exposed are those who trusted the clinic with highly personal information. Plastic-surgery patients often share photographs, financial records for elective procedures, home addresses, phone numbers and sometimes passport details for international clients. Even though the precise data set is unknown, any leak of such material can fuel identity theft, insurance fraud or blackmail. If you or a family member have visited Roberto Polizzi’s clinic or any affiliated facility since it opened, your information may now sit in an attacker’s archive. The breach therefore carries direct consequences for ordinary patients and their households rather than abstract corporate risk.

Doxxing and Identity-Chain Risks

Medical breaches rarely stop at one database. Attackers routinely cross-reference leaked patient emails, phone numbers and addresses with credential-stuffing results from earlier breaches. A single reused password can hand over an email account, which then yields tax returns, social-media profiles and children’s school records. In this case the plastic-surgery context adds another layer: before-and-after photographs can be weaponized for doxxing or extortion. Credential leaks like this one cascade into account takeovers that reach gaming platforms, where children’s usernames and chat logs become additional links in the chain. Without deliberate mapping, one breach can quietly expose an entire household’s digital footprint.

8base Ransomware Group Track Record

Public reporting attributes the first major activity of 8base to early 2022. The group maintains a double-extortion model: it encrypts victim networks and simultaneously threatens to publish stolen data unless a ransom is paid. Notable prior targets include mid-sized manufacturing, logistics and healthcare organizations across North and South America. 8base often gains initial access through vulnerable remote-desktop services or compromised vendor credentials, exfiltrates data quietly, then posts samples and deadlines on its leak site. The group’s playbook shows a preference for smaller organizations that lack dedicated incident-response teams, exactly the profile of many private medical clinics.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, usernames and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you ever used at robertopolizzi.com.br or affiliated patient portals and enable 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which frequently chain back to the same addresses and phone numbers leaked in medical incidents.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume weeks of your own time.

The incident underscores a persistent reality: medical providers remain high-value targets, and patients bear the long-term consequences when defenses fail. One practical step taken now can break the chain before the next opportunistic attacker exploits it. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information.