The Vascular Experts Listed by INC Ransom Ransomware Group

On May 19, 2025, medical practice The Vascular Experts appeared on the leak site of the incransom ransomware group after attackers exfiltrated internal files during a ransomware incident. Patients whose records or personal information sit inside those files now face the possibility that their data has been stolen and could surface publicly or be sold.

What Public Reporting Shows

Public reporting indicates the group posted details of the breach on its leak site, claiming that internal files were taken. The Vascular Experts, founded in 2001, operates more than 20 locations across Connecticut and Rhode Island and employs nearly 30 clinical providers along with more than 20 board-certified vascular surgeons. No exact patient count has been disclosed, and the precise volume or type of records exposed remains unclear from available reporting. The practice specializes in minimally invasive vascular procedures including angioplasty, endovascular surgery, vein ablations, and sclerotherapy.

Why This Matters for You and Your Family

When a medical provider is hit, the information involved is rarely limited to billing addresses. Medical histories, insurance details, Social Security numbers used for verification, and contact information for entire households can be included. If your vascular care or that of a parent or child was handled at any of their Connecticut or Rhode Island offices, your family’s sensitive health and identity data may now be in unauthorized hands. Health records are especially damaging because they can be used for insurance fraud, prescription scams, or targeted phishing that sounds legitimate because it references real treatments.

The Doxxing and Identity-Chain Risks

Stolen medical data rarely stays isolated. Attackers combine it with credentials from other breaches to build detailed profiles. A leaked email and password from this incident can unlock accounts on patient portals, then cascade into email, banking, or social media. Once one account falls, addresses, phone numbers, and family relationships become visible, accelerating doxxing. Gaming accounts belonging to children are frequently part of these chains because kids often reuse passwords or email addresses tied to family medical paperwork. Credential leaks like this one therefore threaten both adult identity theft and younger family members’ online safety.