The Smile Spa Listed by DragonForce Ransomware Group

On August 27, 2025, the DragonForce ransomware group added The Smile Spa in Baton Rouge, Louisiana, to its public leak site, claiming that internal files had been exfiltrated from the dental and spa practice run by Dr. Aimee Russo-Mounger.

Reported Details of the Incident

Public reporting indicates the group posted evidence of successful data theft from the small business. The listing appears on the DragonForce leak site, hosted on the dark web, and was first tracked by ransomware.live. No exact count of affected patients has been released, but the exposed material consists of internal files that ransomware operators typically harvest during such attacks. Available reporting describes the breach as part of a ransomware deployment in which the attackers encrypt systems and threaten to publish stolen data unless a ransom is paid.

Internal files were allegedly exfiltrated, a common outcome when small medical and wellness practices are targeted. The practice offers routine dental care as well as spa services, meaning patient records, contact information, insurance details, and possibly payment data could be among the stolen material.

Why This Matters for You and Your Family

When a local provider like a dentist or spa stores your name, address, phone number, date of birth, Social Security number, or insurance information, that data becomes valuable to criminals. A breach at one small business can expose details that link directly to your household. Once criminals have your information from a place you trusted with your family’s health records, they can open accounts in your name, file fraudulent tax returns, or sell the data on underground markets.

Patients of The Smile Spa now face the same risks that follow any healthcare-related breach. Even if you are not a current patient, similar small providers hold records for millions of families. The incident shows how quickly your personal data can leave a seemingly safe local business and appear on a ransomware leak site.

The Doxxing and Identity-Chain Risks

Stolen medical and personal records rarely stay isolated. Attackers combine them with information from other breaches to build detailed profiles. A phone number from one leak, an email from another, and a password reused across accounts can create a chain that leads to doxxing. Criminals then target gaming accounts, social media, or family members to extract more information or demand payment.

Credential leaks like this one frequently cascade into account takeovers. Children’s gaming accounts are especially vulnerable because they often share the same email address or password as a parent’s dental-patient record. Once an attacker controls one account, they can pivot to others, exposing photos, addresses, and real-time location data that families never intended to make public.

DragonForce’s Publicly Known Track Record

Public reporting attributes DragonForce with emerging in late 2023 as a ransomware-as-a-service operation. The group has claimed responsibility for attacks on hospitals, schools, manufacturers, and professional service firms. Its typical playbook involves initial access through phishing or exploited remote desktop credentials, followed by data exfiltration and deployment of ransomware. After encryption, the operators wait a short period before publishing samples on their leak site and threatening full disclosure unless the victim pays. Extortion tactics often combine data leaks with distributed denial-of-service attacks to increase pressure.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at The Smile Spa or any similar provider, then enable two-factor authentication through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your family’s data is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and credentials exposed in incidents like this.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate or chase down every copy of your information yourself.

The incident at The Smile Spa is a reminder that even routine appointments can put your family’s most sensitive details at risk. Taking concrete steps now limits how far attackers can travel down the identity chain created by this and future breaches. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts.