signatureperformance.com Listed by dispossessor Ransomware Group

On February 26, 2024, healthcare administration firm Signature Performance appeared on the leak site of the Dispossessor ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the company, which helps lower administrative costs and burdens for healthcare providers. The disclosure does not specify how many individuals were affected or list the exact data types contained in the stolen files.

Details from the Leak Site

The primary disclosure on the Dispossessor leak site indicates that Signature Performance suffered a ransomware intrusion and that attackers successfully removed internal files before encryption. No victim count, ransom amount, or sample data appears in the posting. The notification simply confirms exfiltration occurred and threatens further publication if demands are not met. Public reporting on similar Dispossessor listings shows that when the group posts a company, it has already extracted data and is prepared to release it in batches or all at once.

February 26, 2024 marks the first public confirmation of the incident through the ransomware leak site. The company has not yet issued a separate public breach notification detailing the scope, leaving the precise scale of exposure unknown at this time.

Why This Matters for You and Your Family

When a healthcare administration company loses control of internal files, the information often includes patient records, employee details, insurance paperwork, billing information, and vendor contracts. Even though the exact contents remain undisclosed, any data tied to healthcare administration can directly affect families who receive services through providers that contract with Signature Performance. Your name, address, date of birth, Social Security number, or medical billing history may have been stored in those systems.

Once stolen, this information rarely stays contained. It moves through underground markets where identity thieves combine it with other leaks to build complete profiles. For ordinary families this translates into higher risk of tax fraud, insurance scams, or unexpected medical bills filed under your name.

Doxxing and Identity-Chain Risks

Healthcare-related breaches create long identity chains because medical files frequently link email addresses, phone numbers, insurance IDs, and employer details. Attackers or subsequent buyers can pivot from one exposed record to gaming accounts, social media handles, or family member profiles that share the same address or phone number. A single leaked employee record can expose not only the worker but also spouses and children listed as dependents.

Credential leaks like this one often cascade into account takeovers across unrelated services. If passwords or security questions were stored alongside personal data, criminals can test them on email, banking, or gaming platforms. Children’s gaming accounts are especially vulnerable because parents frequently reuse credentials and because kids rarely enable strong protections.

Dispossessor Group Track Record

Public reporting attributes the emergence of Dispossessor to mid-2023. The group has targeted organizations across multiple sectors, with a focus on companies that handle sensitive operational data. Notable prior victims listed on their site include firms in manufacturing, logistics, and professional services. Their typical playbook begins with initial access through phishing or exploited remote desktop credentials, followed by lateral movement to locate valuable internal shares. After exfiltration they deploy ransomware and then list the victim on their leak site with countdown timers if payment is not received.

The group’s extortion style relies on pressure through data publication rather than solely on system encryption. They post proof-of-compromise screenshots and, in many cases, begin releasing downloaded archives in stages. This dual-threat approach increases the likelihood that stolen information reaches broader criminal networks even if the victim eventually pays.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used at Signature Performance or related healthcare portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same contact details.
• Let remediation specialists manage takedown requests for any exposed personal records appearing on data broker sites or underground forums.

The incident underscores that healthcare administration data now moves as quickly as financial records in the criminal underground. Staying ahead requires more than reactive checks; it demands ongoing visibility into how your information travels across breaches and platforms. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.