Spectrum Listed by incransom Ransomware Group

On November 22, 2024, Spectrum Medical Imaging, an independent radiology practice serving Eastern and South Western Sydney, appeared on the leak site of the incransom ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The practice has not yet published a public breach notification detailing the number of patients or staff affected, nor has it specified exactly which categories of records were taken.

Details from the Leak-Site Listing

The incransom leak page, first observed on November 22, 2024, claims that Spectrum Medical Imaging suffered a ransomware intrusion in which attackers copied internal files before encrypting systems. The disclosure does not quantify the volume of data or list specific record types such as patient images, billing records, or employee payroll files. It simply states that exfiltrated material is available for review by interested parties. No ransom demand figure or payment deadline is shown in the current listing. Spectrum Medical Imaging’s own website confirms it provides diagnostic and interventional radiology services, including neuroradiology, musculoskeletal imaging, oncology, paediatrics, and cardiac CT and MRI, across both hospital and community settings. This breadth of service means the stolen files could contain sensitive health information belonging to thousands of patients and their referring doctors.

Why This Matters for You and Your Family

When a radiology provider is breached, the exposure often includes names, dates of birth, addresses, Medicare numbers, referring physician details, and diagnostic reports. Even without an exact patient count, anyone who has visited Spectrum Medical Imaging for scans in recent years should treat their personal health data as at risk. Health records are especially damaging if leaked because they can reveal conditions, treatments, and family medical history that identity thieves or fraudsters can exploit for insurance scams, employment discrimination, or targeted phishing. Your family members, including children who may have received paediatric imaging, could also be affected if their records share the same household address or guardian details.

Doxxing and Identity-Chain Risks

Medical data rarely exists in isolation. A leaked radiology report often links a patient’s real name and address to email accounts, phone numbers, and sometimes login credentials used for patient portals. Attackers can chain these fragments across other breaches to build a complete identity profile. Once the chain is assembled, it becomes trivial to hijack online accounts, request new credit cards, or impersonate you to medical insurers. Credential leaks like this one frequently cascade into gaming-platform takeovers; children’s accounts that reuse an email or password from a parent’s medical portal are particularly vulnerable to doxxing and harassment. The longer the exposed data remains unmonitored, the wider these identity chains can spread.

Incransom’s Known Track Record

Public reporting attributes incransom as a ransomware operation that emerged in 2023 and has since targeted healthcare providers, professional services firms, and mid-sized businesses. The group typically gains initial access through phishing or exploited remote desktop services, exfiltrates documents before deploying encryption, and then posts samples on its dark-web leak site to pressure victims into payment. Its playbook emphasises double extortion: both the threat of data publication and the operational disruption caused by locked systems. While the exact number of prior victims is not precisely tallied, incransom has maintained a steady stream of healthcare-related listings throughout 2024, indicating a deliberate focus on organisations that hold sensitive personal information and may be more willing to pay to avoid public exposure of patient data.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours rather than months.
• Rotate any password you have ever used for Spectrum patient portals or related medical logins, and secure every reused account with 2FA through an authenticator app rather than SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent email.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume weeks of your own time.

The incident underscores that even specialised medical practices remain attractive targets and that the data stolen today can fuel identity crimes for years. Acting quickly to map and lock down your personal exposure limits the damage. Try DoxxScan for its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts.