tgh.org Listed by dispossessor Ransomware Group

Tampa General Hospital was listed on the Dispossessor ransomware group’s leak site on July 05, 2023. The listing states that internal files were exfiltrated during a ransomware attack on tgh.org. The disclosure does not quantify how many records were taken or name every piece of information exposed, but it publishes contact details for several senior executives, including phone numbers and email addresses linked to the hospital and its affiliated institutions.

Details in the Primary Listing

The Dispossessor leak site entry states that TGH suffered a ransomware incident and that attackers successfully removed internal files. It lists specific individuals by name and title: Alfred Hess, Vice Chairman of Orthopaedics and Director of Hand Surgery; Frann Murphree Richards, Chief Development Officer and Senior VP; Brian Hammond, CTO and VP; Peter Rucys, Chief Information Security Officer; and Steve Short, CFO and Executive VP. Multiple direct phone numbers and work email addresses appear alongside these names. The listing directs readers to a Telegram channel for more information and provides a contact number for “Persons responsible for data leakage.” No exact volume of stolen data is stated, and the full contents of the exfiltrated files remain undisclosed on the site.

Why This Matters for You and Your Family

When a hospital system is breached, the people whose medical records, insurance details, or billing information sit inside those networks face immediate and lasting exposure. Even if the primary disclosure does not list every data type taken, internal files from a healthcare provider routinely contain names, dates of birth, Social Security numbers, diagnoses, treatment records, and payment information. Any of these can be sold or used to open fraudulent accounts in your name. If you or your family members have received care at Tampa General Hospital or its affiliated clinics, your information may now sit in an attacker-controlled archive. The published executive contact details also create an easy bridge for phishing campaigns aimed at both staff and patients.

Doxxing and Identity-Chain Risks

Publishing executive names, titles, direct phone numbers, and email addresses gives attackers and identity thieves ready-made starting points. These details can be cross-referenced with other breaches to map out home addresses, family relationships, and additional accounts. Once one executive’s email appears in a dump, credential-stuffing attempts often follow against personal services, cloud storage, or even children’s gaming logins that reuse the same password. The result is a widening chain of doxxing that can expose your household far beyond the original hospital records. Credential leaks like this one cascade into account takeovers that reach family members who never interacted with the breached organization.

Dispossessor Group Track Record

Public reporting attributes the Dispossessor name to a ransomware operation that emerged in early 2023. The group typically gains initial access through compromised credentials or vulnerable remote desktop services, exfiltrates data before encrypting systems, and then runs a double-extortion campaign by threatening to publish stolen files unless a ransom is paid. Notable prior victims have included healthcare providers and mid-sized enterprises. Their playbook relies on leaking selected samples and executive contact information on their site to increase pressure. The exact tactics used against Tampa General Hospital have not been detailed by the group, but the published listing follows their established pattern of naming individuals and providing direct contact methods.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what chains back to the TGH breach.
• Rotate any password you used at tgh.org or related hospital portals anywhere else it appears, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let DoxxScan remediation specialists handle takedown requests for any exposed personal details appearing on data-broker or extortion sites.

The TGH listing is a reminder that healthcare breaches continue to surface long after the initial attack. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with this incident. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach created for you and your family.